fix: .snyk & package.json to reduce vulnerabilities (#2001)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MERGE-72553
- https://snyk.io/vuln/SNYK-JS-MORGAN-72579
- https://snyk.io/vuln/npm:braces:20180219
- https://snyk.io/vuln/npm:bson:20180225
- https://snyk.io/vuln/npm:concat-with-sourcemaps:20180429
- https://snyk.io/vuln/npm:cryptiles:20180710
- https://snyk.io/vuln/npm:crypto-browserify:20140722
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/npm:deep-extend:20180409
- https://snyk.io/vuln/npm:eslint:20180222
- https://snyk.io/vuln/npm:extend:20180424
- https://snyk.io/vuln/npm:hoek:20180212
- https://snyk.io/vuln/npm:is-my-json-valid:20180214
- https://snyk.io/vuln/npm:is-url:20180319
- https://snyk.io/vuln/npm:lodash:20180130
- https://snyk.io/vuln/npm:method-override:20170927
- https://snyk.io/vuln/npm:mime:20170907
- https://snyk.io/vuln/npm:minimatch:20160620
- https://snyk.io/vuln/npm:sshpk:20180409
- https://snyk.io/vuln/npm:stringstream:20180511
- https://snyk.io/vuln/npm:tough-cookie:20170905
- https://snyk.io/vuln/npm:tunnel-agent:20170305
- https://snyk.io/vuln/npm:ws:20171108


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:minimatch:20160620

.snyk

@@ -0,0 +1,12 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:minimatch:20160620':
+    - gulp-nodemon > gulp > vinyl-fs > glob-stream > minimatch:
+        patched: '2018-12-11T02:21:16.577Z'
+    - gulp-nodemon > gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch:
+        patched: '2018-12-11T02:21:16.577Z'
+    - gulp-nodemon > gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch:
+        patched: '2018-12-11T02:21:16.577Z'

package.json

@@ -34,13 +34,15 @@
     "generate-ssl-certs": "scripts/generate-ssl-certs.sh",
     "seed": "gulp seed",
     "seed:prod": "gulp seed:prod",
-    "seed:test": "gulp seed:test"
+    "seed:test": "gulp seed:test",
+    "snyk-protect": "snyk protect",
+    "prepare": "npm run snyk-protect"
   },
   "dependencies": {
     "acl": "^0.4.11",
     "amazon-s3-uri": "0.0.3",
     "async": "~2.5.0",
-    "aws-sdk": "^2.123.0",
+    "aws-sdk": "^2.178.0",
     "body-parser": "^1.18.2",
     "bower": "^1.8.2",
     "chalk": "~2.1.0",
@@ -58,15 +60,15 @@
     "gulp": "~3.9.1",
     "gulp-angular-templatecache": "~2.0.0",
     "gulp-autoprefixer": "~4.0.0",
-    "gulp-concat": "~2.6.0",
+    "gulp-concat": "~2.6.1",
     "gulp-csslint": "~1.0.0",
     "gulp-csso": "~3.0.0",
     "gulp-eslint": "^4.0.0",
     "gulp-imagemin": "~3.3.0",
     "gulp-less": "^3.3.2",
     "gulp-load-plugins": "~1.5.0",
     "gulp-ng-annotate": "~2.0.0",
-    "gulp-nodemon": "^2.2.1",
+    "gulp-nodemon": "^2.4.1",
     "gulp-refresh": "^1.1.0",
     "gulp-rename": "~1.2.2",
     "gulp-rev": "~8.0.0",
@@ -75,11 +77,11 @@
     "helmet": "^3.8.2",
     "imagemin-pngquant": "~5.1.0",
     "jasmine-core": "~2.7.0",
-    "lodash": "~4.17.4",
+    "lodash": "~4.17.5",
     "lusca": "~1.5.1",
     "method-override": "^2.3.10",
     "mongoose": "^4.13.17",
-    "morgan": "^1.9.0",
+    "morgan": "^1.9.1",
     "multer": "~1.3.0",
     "multer-s3": "^2.7.0",
     "nodemailer": "~4.0.1",
@@ -97,7 +99,8 @@
     "socket.io": "^2.0.3",
     "validator": "~8.0.0",
     "winston": "~2.3.1",
-    "wiredep": "~4.0.0"
+    "wiredep": "~4.0.0",
+    "snyk": "^1.116.4"
   },
   "devDependencies": {
     "coveralls": "~2.13.0",
@@ -113,5 +116,6 @@
     "semver": "~5.4.1",
     "should": "~11.2.1",
     "supertest": "~3.0.0"
-  }
+  },
+  "snyk": true
 }