Update qs dependency (fixed security vulnerability)

https://blog.liftsecurity.io/2014/08/06/denial-of-service-in-qs