Propose updating Vue Resource.

Will require changing the way the X-CSRF-TOKEN header in bootstrap.js

This seems to be compatible with Larval Passport