Bump dependencies

no issue

- bson-objectid@1.2.1
- compression@1.7.1
- express@4.16.2
- moment-timezone@0.5.14
- mysql@2.15.0
- nconf@0.8.5
- sanitize-html@1.15.0
- simple-html-tokenizer@0.4.3
- superagent@3.8.0

IMPORTANT:
- we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests
- i didn't investigate a lot, but there is petkaantonov/bluebird#1468
- and for moment, a couple of reports came in for .19 regarding a wrong date behaviour

package.json

@@ -35,16 +35,16 @@
     "body-parser": "1.18.2",
     "bookshelf": "0.10.3",
     "brute-knex": "https://github.com/cobbspur/brute-knex/tarball/37439f56965b17d29bb4ff9b3f3222b2f4bd6ce3",
-    "bson-objectid": "1.1.5",
+    "bson-objectid": "1.2.1",
     "chalk": "1.1.3",
     "cheerio": "0.22.0",
-    "compression": "1.7.0",
+    "compression": "1.7.1",
     "connect-slashes": "1.3.1",
     "cookie-session": "1.3.2",
     "cors": "2.8.4",
     "csv-parser": "1.11.0",
     "downsize": "0.0.8",
-    "express": "4.15.3",
+    "express": "4.16.2",
     "express-brute": "1.0.1",
     "express-hbs": "1.0.4",
     "extract-zip-fork": "1.5.1",
@@ -69,10 +69,10 @@
     "markdown-it-mark": "2.0.0",
     "mobiledoc-dom-renderer": "0.6.5",
     "moment": "2.18.1",
-    "moment-timezone": "0.5.13",
+    "moment-timezone": "0.5.14",
     "multer": "1.3.0",
-    "mysql": "2.14.1",
-    "nconf": "0.8.4",
+    "mysql": "2.15.0",
+    "nconf": "0.8.5",
     "netjet": "1.1.4",
     "nodemailer": "0.7.1",
     "oauth2orize": "1.10.0",
@@ -81,11 +81,11 @@
     "passport-oauth2-client-password": "0.1.2",
     "path-match": "1.2.4",
     "rss": "1.2.2",
-    "sanitize-html": "1.14.1",
+    "sanitize-html": "1.15.0",
     "semver": "5.4.1",
     "simple-dom": "0.3.2",
-    "simple-html-tokenizer": "0.4.1",
-    "superagent": "3.6.0",
+    "simple-html-tokenizer": "0.4.3",
+    "superagent": "3.8.0",
     "unidecode": "0.1.8",
     "uuid": "3.1.0",
     "validator": "6.3.0",
@@ -120,7 +120,7 @@
     "matchdep": "1.0.1",
     "minimist": "1.2.0",
     "mocha": "3.5.3",
-    "nock": "9.0.20",
+    "nock": "9.0.27",
     "rewire": "2.5.2",
     "run-sequence": "1.2.2",
     "should": "11.2.1",