update qs dependency

See https://nodesecurity.io/advisories/qs_dos_extended_event_loop_blocking
Merge pull request #1 from pdehaan/patch-1

update qs dependency