Lock down all dependencies

this makes staying up to date a more manual process but prevents
breakage of generated projects moving forward

- Lock down bower.json deps
- Lock down package.json deps
- Lock karma-coffee-preprocessor to keep it from throwing peer dep errors

fixes #138

/cc @eastridge
Merge pull request #139 from walmartlabs/lock-down-deps

Lock down all dependencies