fix(deps): update dependency morgan to ~1.9.1

[mend-for-github-com]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
morgan	~1.6.1 -> ~1.9.1

By merging this PR, the issue #3 will be automatically resolved and closed:

Severity	CVSS Score	CVE
Critical	9.8	CVE-2019-5413

---

Release Notes

expressjs/morgan (morgan)

v1.9.1

Compare Source

==================

• Fix using special characters in format
• deps: depd@~1.1.2
  • perf: remove argument reassignment

v1.9.0

Compare Source

==================

• Use res.headersSent when available
• deps: basic-auth@~2.0.0
  • Use safe-buffer for improved Buffer API
• deps: debug@2.6.9
• deps: depd@~1.1.1
  • Remove unnecessary Buffer loading

v1.8.2

Compare Source

==================

• deps: debug@2.6.8
  • Fix DEBUG_MAX_ARRAY_LENGTH
  • deps: ms@2.0.0

v1.8.1

Compare Source

==================

• deps: debug@2.6.1
  • Fix deprecation messages in WebStorm and other editors
  • Undeprecate DEBUG_FD set to 1 or 2

v1.8.0

Compare Source

==================

• Fix sending unnecessary undefined argument to token functions
• deps: basic-auth@~1.1.0
• deps: debug@2.6.0
  • Allow colors in workers
  • Deprecated DEBUG_FD environment variable
  • Fix error when running under React Native
  • Use same color for same namespace
  • deps: ms@0.7.2
• perf: enable strict mode in compiled functions

v1.7.0

Compare Source

==================

• Add digits argument to response-time token
• deps: depd@~1.1.0
  • Enable strict mode in more places
  • Support web browser loading
• deps: on-headers@~1.0.1
  • perf: enable strict mode

---

• If you want to rebase/retry this PR, check this box