Upgrade node dependencies

There's a current vulnerability in jsonwebtoken that I want to get
patched right away. We're not vulnerable (not using jwt.verify()) but
people will likely want it patched anyway.