Bump production dependencies with open CVEs

closes #916

package.json

@@ -106,7 +106,6 @@
     "koa": "^2.2.0",
     "koa-bodyparser": "4.2.0",
     "koa-compress": "2.0.0",
-    "koa-connect": "1.0.0",
     "koa-convert": "1.2.0",
     "koa-helmet": "3.2.0",
     "koa-jwt": "^3.2.1",
@@ -147,7 +146,7 @@
     "rich-markdown-editor": "^9.0.5",
     "safestart": "1.1.0",
     "sequelize": "4.28.6",
-    "sequelize-cli": "^2.7.0",
+    "sequelize-cli": "^5.4.0",
     "sequelize-encrypted": "0.1.0",
     "slug": "^1.0.0",
     "string-replace-to-array": "^1.0.3",