Fix security vuln by bumping express-hbs

Also bumps pa11y-webservice to the latest version.

package.json

@@ -28,11 +28,11 @@
     "body-parser": "~1.19.0",
     "compression": "~1.7.4",
     "express": "~4.17.1",
-    "express-hbs": "~2.1.2",
+    "express-hbs": "~2.4.0",
     "http-headers": "~3.0.2",
     "kleur": "~4.1.2",
     "moment": "~2.29.0",
-    "pa11y-webservice": "~3.2.0",
+    "pa11y-webservice": "~3.2.1",
     "pa11y-webservice-client-node": "~2.0.0",
     "underscore": "~1.11.0"
   },