Lock versions of packages, fix client configuration