Bumps [express](https://github.com/expressjs/express) from 4.17.1 to 4.18.2.
- [Release notes](https://github.com/expressjs/express/releases/tag/4.18.2)
- [Commits](expressjs/express@4.17.1...4.18.2)

Bumps [socket.io](https://github.com/socketio/socket.io) from 4.5.3 to 4.5.4.
- [Release notes](https://github.com/socketio/socket.io/releases/tag/4.5.4)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md#454-2022-11-22)
- [Commits](socketio/socket.io@4.5.3...4.5.4)

Bumps [supertest](https://github.com/ladjs/supertest) from 6.2.3 to 6.3.3.
- [Release notes](https://github.com/ladjs/supertest/releases/tag/v6.3.3)
- [Commits](ladjs/supertest@v6.2.3...v6.3.3)

Bumps [express-session]() from 1.17.2 to 1.17.3.
- [Release notes](https://github.com/expressjs/session/releases/tag/v1.17.3)
- [Changelog](https://github.com/expressjs/session/blob/master/HISTORY.md)
- [Commits](expressjs/session@v1.17.2...v1.17.3)

We used to use fancy-log in our logging, however we removed the last
usage in commit 6b00c53. As this package is no longer used anywhere in
our code, we can remove it.

In PR #667 we added `acorn` as a direct dependency to fix complaints
from npm about peer dependencies, due to a bug in npm [[1]]. That bug
now appears to have been fixed; removing `acorn` from our `package.json`
does not result in any peer dependency warnings. Also, as we now ensure
that users do not install dev dependencies, we can be confident that
they will not need `acorn`, as it is only required by dev dependencies.

[1]: #666