fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AJV-584908
- https://snyk.io/vuln/SNYK-JS-JSONSCHEMA-1920922
- https://snyk.io/vuln/SNYK-JS-NODEMAILER-6219989
- https://snyk.io/vuln/SNYK-JS-QS-3153490

package.json

@@ -44,12 +44,12 @@
     "mongoose": "^4.11.14",
     "morgan": "^1.8.2",
     "node-schedule": "^1.2.3",
-    "nodemailer": "^4.0.1",
+    "nodemailer": "^6.9.9",
     "nodemailer-sendgrid-transport": "^0.2.0",
     "passport": "^0.3.2",
     "passport-local": "^1.0.0",
     "passport-local-mongoose": "^4.0.0",
-    "request": "^2.81.0"
+    "request": "^2.88.2"
   },
   "devDependencies": {
     "bower": "^1.8.0",