fixed security warnings by upgrading request so that qs >= v1.0.0

see https://nodesecurity.io/advisories/qs_dos_extended_event_loop_blocking for details. v2.40.0 is the minimum fixed version.