deps: cookie-signature@1.0.5