Lock sinon.js to fix a travis exception

This fixes #2031