fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MORGAN-72579
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/npm:ms:20170412

package.json

@@ -36,7 +36,7 @@
     "lazy-dependable": "latest",
     "lodash": "latest",
     "md5": "latest",
-    "morgan": "1.5.3",
+    "morgan": "1.9.1",
     "mongoose": "^4.3.6",
     "q": "^1.0.1",
     "querystring": "latest",