Lock bower dependencies

See https://www.npmjs.org/doc/json.html#dependencies for approximately equivalent to version