Upgrade carto.js and leaflet

[flibbertigibbet]

Upgrading from the current cartodb.js library version will require switching from bower, and the library is not on npm.

Depends on #899.

[flibbertigibbet]

New carto.js package is here.

[flibbertigibbet]

Blocked due to lack of support for the bike layer viz.json in carto.js v4. See these upgrade notes and these FAQ.