Updates ejs, runs audit fixes

package.json

@@ -27,14 +27,14 @@
     "cookie-parser": "^1.4.3",
     "cookie-session": "^2.0.0-beta.3",
     "csurf": "^1.9.0",
-    "ejs": "^2.5.7",
+    "ejs": "^3.1.6",
     "express": "^4.15.4",
     "express-ejs-layouts": "^2.3.1",
     "express-flash-2": "^1.0.1",
     "express-mw-correlation-id": "^4.0.0",
     "helmet": "^3.21.2",
     "ioredis": "^3.2.2",
-    "lodash": "^4.17.15",
+    "lodash": "^4.17.21",
     "login.dfe.async-retry": "git+https://github.com/DFE-Digital/login.dfe.async-retry.git#v1.1",
     "login.dfe.audit.winston-sequelize-transport": "github:DFE-Digital/login.dfe.audit.winston-sequelize-transport#v2.12",
     "login.dfe.config.schema.common": "git+https://github.com/DFE-Digital/login.dfe.config.schema.common.git#v1.8.1",
@@ -53,12 +53,12 @@
     "node-schedule": "^1.3.0",
     "openid-client": "^1.19.0",
     "passport": "^0.4.0",
+    "request": "^2.88.0",
     "sequelize": "^4.44.3",
     "simpl-schema": "^1.5.6",
     "tedious": "^2.6.4",
     "uuid": "^3.2.0",
-    "winston": "^2.4.3",
-    "request": "^2.88.0"
+    "winston": "^2.4.3"
   },
   "devDependencies": {
     "eslint": "^6.5.1",