Update dependencies

This commit updates bluebird, sql and validator. The latter one is
reported to be vulnerable:
https://nodesecurity.io/advisories/validator-isurl-denial-of-service
`~` rather than `^`, same goes for sql and validator. While semver does dictate that there wouldn't be any breaking changes between versions like that not everyone necessarily follows that (sequelize doesn't at times).