fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-EJS-6689533

Author: snyk-bot

package-lock.json

@@ -21,7 +21,7 @@
     "consolidate": "0.14.5",
     "dustjs-helpers": "1.5.0",
     "dustjs-linkedin": "2.5.0",
-    "ejs": "1.0.0",
+    "ejs": "3.1.10",
     "ejs-locals": "1.0.2",
     "errorhandler": "1.2.0",
     "express": "4.12.4",