Update dependencies and vulns

[MDarmawan]

Title: PR Title

Short Description: Short explanation/description of PR (or issue/task)

Checklist

• I have performed a self-review of my changes
• My code/changes are commented (especially hard-to-understand areas) if they were not autogenerated
• I have written/updated new integration tests for the core changes or new/updated tests not necessary (test/integration/key-protect.v2.test.js)
• I have posted test results from local tests where relevant, and made sure the TravisCI tests succeeded

Changes

Briefly identify changes made in this PR

Test Results

Test results may be run by the TravisCI build. If so, please verify whether they are running properly.

Dependencies

Is anything changing with respect to dependencies (i.e. package.json)? Explain that here and why they were changed.

[MDarmawan]

manually running the tests right now, given that travis seems to be disabled right now