Update bower.json to depend on Dojo >=1.8.9

This is intended to encourage users to update to a version of Dojo that
incorporates the fixes for XSS vulnerabilities in dojox, although these
vulnerabilities do not directly affect dgrid at all.