package.json: update vulnerable packages

updates to connect and request packages