npm audit fix

Author: jasonjoh

demo/graph-tutorial/package-lock.json

@@ -6,11 +6,16 @@
     "start": "node ./bin/www"
   },
   "dependencies": {
+    "connect-flash": "^0.1.1",
     "cookie-parser": "~1.4.4",
     "debug": "~2.6.9",
+    "dotenv": "^8.2.0",
     "express": "~4.16.1",
-    "hbs": "~4.0.4",
+    "express-session": "^1.17.0",
+    "hbs": "^4.1.0",
     "http-errors": "~1.6.3",
+    "isomorphic-fetch": "^2.2.1",
+    "moment": "^2.24.0",
     "morgan": "~1.9.1"
   }
 }