Update marked dep

See https://nodesecurity.io/advisories/marked_multiple_content_injection_vulnerabilities