Bumping qs to pick up security fix.  https://blog.liftsecurity.io/2014/0...

...8/06/denial-of-service-in-qs