fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASHSET-1320032
- https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795
- https://snyk.io/vuln/SNYK-JS-MINIMIST-559764
- https://snyk.io/vuln/SNYK-JS-REQUEST-3361831
- https://snyk.io/vuln/npm:hoek:20180212

package.json

@@ -35,16 +35,16 @@
     ]
   },
   "dependencies": {
-    "auth0": "2.17.0",
+    "auth0": "2.25.0",
     "auth0-extension-express-tools": "^1.1.9",
     "auth0-extension-tools": "^1.3.3",
     "auth0-oauth2-express": "1.2.0",
     "body-parser": "^1.15.2",
     "cors": "2.8.1",
     "crypto": "^0.0.3",
     "express": "4.14.0",
-    "express-jwt": "^5.1.0",
-    "handlebars": "^4.0.5",
+    "express-jwt": "^6.1.1",
+    "handlebars": "^4.7.4",
     "jsonwebtoken": "^7.1.9",
     "lodash": "^4.16.4",
     "nconf": "^0.8.4",