Fix broken npm dependencies - Karma is not following semantic versioning so package.json needs to be more restrictive about what versions it can use