update node-jsonwebtoken which solves a security bug
0.2.2