fixed qs security issue by upgrading to 1.0.0

see https://nodesecurity.io/advisories/qs_dos_extended_event_loop_blocking
version bump