Locked down coffeescript version

Can we lock this down while we're at it?