chore(deps): update deps, fix nsp (#517) r=@philbooth

lib/config.js

@@ -360,7 +360,7 @@ var files = (envConfig + ',' + process.env.CONFIG_FILES)
 conf.loadFile(files);
 
 var options = {
-  strict: true
+  allowed: 'strict'
 };
 
 conf.validate(options);

package.json

@@ -27,10 +27,10 @@
     "bluebird": "^2.9.14",
     "buf": "0.1.0",
     "commander": "^2.9.0",
-    "convict": "1.5",
+    "convict": "4.0.2",
     "fxa-jwtool": "^0.7.1",
     "fxa-notifier-aws": "1.0.0",
-    "fxa-shared": "1.0.4",
+    "fxa-shared": "1.0.5",
     "hapi": "16.6.0",
     "hapi-hpkp": "1.0.0",
     "joi": "^10.0.1",