move pinned versions of request and tough-cookie to prod dependencies
move pinned versions of request and tough-cookie to prod dependencies

fixes: CNVS-30588 for reals this time

test plan:
npm install --production should work on node 0.12.x

(the "--production" part is important here, since
it worked before for devDependencies but we want
to specifically test if it works just installing
prod dependencies)

Change-Id: I27d90db87f3be2891a8e04eb413f1cd7f30dd52f
Reviewed-on: https://gerrit.instructure.com/86151
Reviewed-by: Simon Williams <088e16a1019277b15d58faf0541e11910eb756f6@instructure.com>
Tested-by: Jenkins
Product-Review: Ryan Shaw <ea3cd978650417470535f3a4725b6b5042a6ab59@instructure.com>
QA-Review: Ryan Shaw <ea3cd978650417470535f3a4725b6b5042a6ab59@instructure.com>

venturehive/canvas-lms,sfu/canvas-lms,HotChalk/canvas-lms,venturehive/canvas-lms,HotChalk/canvas-lms,SwinburneOnline/canvas-lms,HotChalk/canvas-lms,fronteerio/canvas-lms,sfu/canvas-lms,sfu/canvas-lms,SwinburneOnline/canvas-lms,HotChalk/canvas-lms,sfu/canvas-lms,djbender/canvas-lms,fronteerio/canvas-lms,fronteerio/canvas-lms,venturehive/canvas-lms,grahamb/canvas-lms,sfu/canvas-lms,grahamb/canvas-lms,grahamb/canvas-lms,SwinburneOnline/canvas-lms,grahamb/canvas-lms,djbender/canvas-lms,fronteerio/canvas-lms,djbender/canvas-lms,grahamb/canvas-lms,SwinburneOnline/canvas-lms,venturehive/canvas-lms,sfu/canvas-lms,djbender/canvas-lms,sfu/canvas-lms