Implement our npm vulnerability fixes upstream

[saffaalvi]

We have fixed the issues reported by npm audit of jupyter-web-app component.

The commits related to this feature that need to be integrated into upstream code are:

• Aug 19 : fix(npm): fix vulnerabilities (squashed commit) (StatCan/jupyter-apis@d32875d)
• Jan 25: fix npm vulnerabilities (StatCan/jupyter-apis@197905b)

[ca-scribner]

@brendangadd Saffa wont get to these before she leaves, so we need to assign them to someone else. I pushed this up to firebox so we talk about it, but if you don't think it is high priority we can bump it back down