User allow-forms branch of oasis.js

Until the allow-forms branch of oasis.js gets merged, point to 
that branch in bower.json
Upgrade bower version to deal with 
https://github.com/bower/bower/pull/1403