Get velocity.js from npm instead of bower

So users can override it.