Backend security updated

[andrewbiang888]

• run npm audit fix on existing codebase
• start going through remaining security issues while addressing breaking changes