fix: package.json to reduce vulnerabilities
fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:negotiator:20160616
- https://snyk.io/vuln/npm:send:20151103
- https://snyk.io/vuln/npm:serve-static:20150120
- https://snyk.io/vuln/npm:serve-static:20150113
- https://snyk.io/vuln/npm:send:20140912
- https://snyk.io/vuln/npm:qs:20140806-1
- https://snyk.io/vuln/npm:qs:20140806
- https://snyk.io/vuln/npm:express:20140912
- https://snyk.io/vuln/npm:cookie-signature:20160804
- https://snyk.io/vuln/npm:mongoose:20160116

Latest report for cabbiepete/backbone-testing:
https://snyk.io/test/github/cabbiepete/backbone-testing
cabbiepete/backbone-testing,cabbiepete/backbone-testing