update security patches for packages / investigate packages

we can remove certain packages bc theyre unused:

comma-number (js has a built-in way for this) https://www.basedash.com/blog/how-to-format-a-number-with-commas-in-javascript
bcrypt
connect-ensure-login
connect-mongo
connect-roles
deepmerge
express-session
fasttext.js
fbgraph
feedparser
franc
franc-min
growl
jquery
JSONStream
langdetect-ensemble
merge-stream
method-override
netmask
node-cron
pm2
production
promise
randomcolor
react-color
react-cookie
react-dnd
react-dnd-html5-backend
sanitize-html
timezone
tweet-matches
twit
uuid
vinyl-source-stream
wordcloud
workbox-background-sync
workbox-broadcast-update
workbox-cacheable-response
workbox-google-analytics
workbox-navigation-preload
workbox-range-requests
workbox-streams
xmlhttprequest-ssl Unused devDependencies
@fortawesome/fontawesome-common-types (this exists in fontawesome core, no need to reinstall)
@testing-library/user-event (we might need this idk what it is)
@types/canvasjs
@types/d3-scale-chromatic
@types/jest (we might need this)
@types/react-color
@types/react-linkify
serve

packages that we dont really need but we can keep to save time:

chalk (?) all it does is add color to terminals. like i guess thats cute. we can keep
linkifyjs & linkfy-react (its used in exactly 1 component. seems a bit goofy but we can keep)

stuff unsure about:

idk if we need these, keeping just in case.

future migration packages:

TID-Lab / Aggie-FuCo