Bump handlebars and ws versions to fix security vulnerability

[olivertso]

dependabot opened some PRs to fix some security vulnerabilities.

[orta]

I think that server major change seems OK