fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:negotiator:20160616
- https://snyk.io/vuln/npm:negotiator:20160616
- https://snyk.io/vuln/npm:ws:20160624

Latest report for wechaty/wechaty:
https://snyk.io/test/github/wechaty/wechaty

package.json

@@ -104,14 +104,14 @@
     "@types/socket.io": "1.4.27",
     "body-parser": "1.15.2",
     "brolog": "0.3.10",
-    "express": "4.13.4",
+    "express": "4.14.0",
     "is-ci": "1.0.9",
     "is-docker": "1.1.0",
     "moment": "2.17.0",
     "ps-tree": "^1.1.0",
     "retry-promise": "1.0.0",
     "selenium-webdriver": "3.0.0",
-    "socket.io": "1.4.8",
+    "socket.io": "1.5.0",
     "ws": "1.1.1"
   },
   "devDependencies": {