serves up dependencies via app/bower.json