Bower update

And downgrade qwery to 3.4.2 (4 doesn't support <= IE8)

Also removed its entry from `bower.json` so can't be updated accidentally
Why can't we lock it in the version number?