Bower fix: transitive dependencies for packages with unrecognized versions wouldn't download

@devoncarew

The reason was that `branch = null` resulted in an invalid URL for the original package's bower.json, so it wouldn't be downloaded/parsed for its dependencies. Now default to "master" branch (after talking to @ebidel).

Also uniquify the reported altered depenencies.