deps: cookie-signature@1.0.4