Lock down versions in bower.json