Use secure endpoints for dependencies

And for good measure, pin the commit we're using so that future builds
produce the same result.

// FREEBIE

bower.json

@@ -11,8 +11,8 @@
     "protobuf": "~3.8.0",
     "bootstrap": "~3.3.0",
     "mustache": "~0.8.2",
-    "qrcode": "git://github.com/davidshimjs/qrcodejs.git#1c78ccd71",
-    "libphonenumber-api": "git://github.com/codedust/libphonenumber-api",
+    "qrcode": "https://github.com/davidshimjs/qrcodejs.git#1c78ccd71",
+    "libphonenumber-api": "https://github.com/codedust/libphonenumber-api.git#cde5193f1350571b105084dfa9cd5320e6615e1f",
     "momentjs": "~2.8.3",
     "indexeddb-backbonejs-adapter": "*",
     "intl-tel-input": "~4.0.1",