Update package.json

Lock to Require.JS 2.1.9; in 2.1.10, problems occur with all our common/* packages.