Update dependencies

This commit updates bluebird, sql and validator. The latter one is
reported to be vulnerable:
https://nodesecurity.io/advisories/validator-isurl-denial-of-service
Hm, why would we fight npm? Also people that are really concerned about versioning of packages will end up using npm shrinkwrap, no?