Update hawk version

[santiagogil]

PR Checklist:

• I have run npm test locally and all tests are passing.
• I have added/updated tests for any new behavior.
  
• If this is a significant change, an issue has already been created where the problem / solution was discussed: [N/A, or add link to issue here]
  

PR Description

Update hawk version in order to avoid a known vulnerability in hoek.
request@2.83.0 > hawk@6.0.2 > hoek@4.2.0

https://nodesecurity.io/advisories/566
https://hackerone.com/reports/310439

Closes #2874

[hanjukim]

Please merge for stopping security alerts!

[benwiggins]

Re-install your packages and/or check your lockfile.
hawk@6.0.2 should be pulling in hoek@4.2.1 which is not vulnerable.

[compulim]

hoek@<5.0.3 is vulnerable, published at CVE-2018-3728.

Starting from hawk@7.0.0, they start using hoek@5.x.x.

[fahrradflucht]

Did you check that this is sufficient and doesn't break anything? Hawk did a major version upgrade for a reason. The api now isn't callback based anymore [0].

As far as I can see request uses this api [1].

[0] mozilla/hawk@f72cdea
[1]

request/tests/test-hawk.js

Line 20 in 5ba8eb4

hawk.server.authenticate(req, getCred, {}, function (err, credentials, attributes) {

[simov]

See #2943