[Dependencies] Update deps to resolve vulns

[WeirdAlex03]

Proposed changes

---

Describe the big picture of your changes here to communicate to the maintainers why we should accept this pull request. If it fixes a bug or resolves a feature request, be sure to link to that issue.

This resolves all vulnerabilities reported by npm audit,
including the breaking change to passport from ^0.4.1 to ^0.6.0.
All tests still pass with these updates.

Fixes #15

Types of changes

---

What types of changes does your code introduce?
Put an x in the boxes that apply

• Bugfix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation Update (if none of the other choices apply)

Checklist

---

Put an x in the boxes that apply. You can also fill these out after creating the PR. If you're unsure about any of them, don't hesitate to ask. This is simply a reminder of what we are going to look for before merging your code.

• My changeset covers only what is described above (no extraneous changes)
• Lint and unit tests pass locally with my changes
• I have added tests that prove my fix is effective or that my feature works
• I have added necessary documentation (if appropriate)
• Any dependent changes have been merged downstream

Further comments

---

If this is a relatively large or complex change, kick off the discussion by explaining why you chose the solution you did and what alternatives you considered, etc...

Following this, I believe we should consider something like Dependabot to automatically flag further vulnerabilities. I would be willing to set it up if we're following through with this.

[emilkovacev]

I checked that it removes the highest security dependency vulnerabilities, and it does!