fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ONHEADERS-10773729

Author: snyk-bot

package-lock.json

@@ -39,7 +39,7 @@
     "lodash": "^4.17.20",
     "mongo-sanitize": "^1.1.0",
     "mongoose": "^5.10.3",
-    "morgan": "^1.10.0",
+    "morgan": "^1.10.1",
     "nodemailer": "^6.4.17",
     "uuid": "^8.3.2",
     "winston": "^3.3.3"