removed auth0-lock from bower

it actualy gets installed as a auth0-angular dep