fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-COOKIEJAR-3149984
- https://snyk.io/vuln/SNYK-JS-HAWK-2808852
- https://snyk.io/vuln/SNYK-JS-ISMYJSONVALID-597165
- https://snyk.io/vuln/SNYK-JS-ISMYJSONVALID-597167
- https://snyk.io/vuln/SNYK-JS-JSONPOINTER-1577288
- https://snyk.io/vuln/SNYK-JS-JSONPOINTER-598804
- https://snyk.io/vuln/SNYK-JS-JSONSCHEMA-1920922
- https://snyk.io/vuln/SNYK-JS-QS-3153490
- https://snyk.io/vuln/npm:constantinople:20180421
- https://snyk.io/vuln/npm:extend:20180424
- https://snyk.io/vuln/npm:hoek:20180212
- https://snyk.io/vuln/npm:is-my-json-valid:20180214
- https://snyk.io/vuln/npm:qs:20170213
- https://snyk.io/vuln/npm:sshpk:20180409
- https://snyk.io/vuln/npm:stringstream:20180511
- https://snyk.io/vuln/npm:tough-cookie:20170905
- https://snyk.io/vuln/npm:tunnel-agent:20170305

package.json

@@ -64,7 +64,7 @@
     ]
   },
   "dependencies": {
-    "auth0": "^2.1.0",
+    "auth0": "^2.25.0",
     "auth0-extension-express-tools": "2.0.0",
     "auth0-extension-tools": "1.3.2",
     "bluebird": "^3.3.4",
@@ -77,8 +77,8 @@
     "lodash": "^4.8.2",
     "nconf": "^0.8.4",
     "request": "^2.71.0",
-    "superagent": "^3.6.0",
-    "webtask-tools": "^3.1.1",
+    "superagent": "^7.0.2",
+    "webtask-tools": "^3.4.1",
     "winston": "^2.3.0"
   },
   "devDependencies": {