Merge pull request #677 from oauthjs/dependabot/npm_and_yarn/lodash-4.17.21

[Security] Bump lodash from 4.17.19 to 4.17.21

Author: mjsalinger

package-lock.json

@@ -38,7 +38,7 @@
   "dependencies": {
     "basic-auth": "2.0.1",
     "bluebird": "3.7.2",
-    "lodash": "4.17.19",
+    "lodash": "4.17.21",
     "promisify-any": "2.0.1",
     "statuses": "1.5.0",
     "type-is": "1.6.18"