diff --git a/package-lock.json b/package-lock.json
index 43e9b741..3d84d036 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15,17 +15,17 @@
         "@mathigon/fermat": "1.1.11",
         "@mathigon/hilbert": "1.1.11",
         "@sendgrid/mail": "7.7.0",
-        "@types/bcryptjs": "2.4.3",
-        "@types/compression": "1.7.2",
-        "@types/cookie-parser": "1.4.3",
-        "@types/express": "4.17.17",
-        "@types/express-flash": "0.0.2",
-        "@types/express-session": "1.17.7",
+        "@types/bcryptjs": "2.4.4",
+        "@types/compression": "1.7.3",
+        "@types/cookie-parser": "1.4.4",
+        "@types/express": "4.17.18",
+        "@types/express-flash": "0.0.3",
+        "@types/express-session": "1.17.8",
         "@types/js-yaml": "4.0.5",
         "@types/lusca": "1.7.2",
         "@types/node-fetch": "2.6.4",
         "@types/pug": "2.0.6",
-        "@types/validator": "13.11.1",
+        "@types/validator": "13.11.2",
         "@webcomponents/custom-elements": "1.6.0",
         "autoprefixer": "10.4.15",
         "autotrack": "2.4.1",
@@ -2194,9 +2194,9 @@
       }
     },
     "node_modules/@types/bcryptjs": {
-      "version": "2.4.3",
-      "resolved": "https://registry.npmjs.org/@types/bcryptjs/-/bcryptjs-2.4.3.tgz",
-      "integrity": "sha512-XTnH9E/rp51aKGsiMtQCHV/owDLW2E9QAxI7ItpWWm6Gi6XO1e4o3VuEYDma0lbitj1vNOBj05Qk8l2BYoiN4A=="
+      "version": "2.4.4",
+      "resolved": "https://registry.npmjs.org/@types/bcryptjs/-/bcryptjs-2.4.4.tgz",
+      "integrity": "sha512-9wlJI7k5gRyJEC4yrV7DubzNQFTPiykYxUA6lBtsk5NlOfW9oWLJ1HdIA4YtE+6C3i3mTpDQQEosJ2rVZfBWnw=="
     },
     "node_modules/@types/body-parser": {
       "version": "1.19.0",
@@ -2208,9 +2208,9 @@
       }
     },
     "node_modules/@types/compression": {
-      "version": "1.7.2",
-      "resolved": "https://registry.npmjs.org/@types/compression/-/compression-1.7.2.tgz",
-      "integrity": "sha512-lwEL4M/uAGWngWFLSG87ZDr2kLrbuR8p7X+QZB1OQlT+qkHsCPDVFnHPyXf4Vyl4yDDorNY+mAhosxkCvppatg==",
+      "version": "1.7.3",
+      "resolved": "https://registry.npmjs.org/@types/compression/-/compression-1.7.3.tgz",
+      "integrity": "sha512-rKquEGjebqizyHNMOpaE/4FdYR5VQiWFeesqYfvJU0seSEyB4625UGhNOO/qIkH10S3wftiV7oefc8WdLZ/gCQ==",
       "dependencies": {
         "@types/express": "*"
       }
@@ -2224,17 +2224,17 @@
       }
     },
     "node_modules/@types/cookie-parser": {
-      "version": "1.4.3",
-      "resolved": "https://registry.npmjs.org/@types/cookie-parser/-/cookie-parser-1.4.3.tgz",
-      "integrity": "sha512-CqSKwFwefj4PzZ5n/iwad/bow2hTCh0FlNAeWLtQM3JA/NX/iYagIpWG2cf1bQKQ2c9gU2log5VUCrn7LDOs0w==",
+      "version": "1.4.4",
+      "resolved": "https://registry.npmjs.org/@types/cookie-parser/-/cookie-parser-1.4.4.tgz",
+      "integrity": "sha512-Var+aj5I6ZgIqsQ05N2V8q5OBrFfZXtIGWWDSrEYLIbMw758obagSwdGcLCjwh1Ga7M7+wj0SDIAaAC/WT7aaA==",
       "dependencies": {
         "@types/express": "*"
       }
     },
     "node_modules/@types/express": {
-      "version": "4.17.17",
-      "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.17.tgz",
-      "integrity": "sha512-Q4FmmuLGBG58btUnfS1c1r/NQdlp3DMfGDGig8WhfpA2YRUtEkxAjkZb0yvplJGYdF1fsQ81iMDcH24sSCNC/Q==",
+      "version": "4.17.18",
+      "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.18.tgz",
+      "integrity": "sha512-Sxv8BSLLgsBYmcnGdGjjEjqET2U+AKAdCRODmMiq02FgjwuV75Ut85DRpvFjyw/Mk0vgUOliGRU0UUmuuZHByQ==",
       "dependencies": {
         "@types/body-parser": "*",
         "@types/express-serve-static-core": "^4.17.33",
@@ -2243,9 +2243,9 @@
       }
     },
     "node_modules/@types/express-flash": {
-      "version": "0.0.2",
-      "resolved": "https://registry.npmjs.org/@types/express-flash/-/express-flash-0.0.2.tgz",
-      "integrity": "sha512-1l0s3YiZpMkWZ/65S4iSOLOnI7bYNDgnxx54nw5eA2pWOZ7Vvc7PpDv6iJq0bB7EBusoVWkzd+RV4r/nLY4/HA==",
+      "version": "0.0.3",
+      "resolved": "https://registry.npmjs.org/@types/express-flash/-/express-flash-0.0.3.tgz",
+      "integrity": "sha512-a48dRK2dtstVAmNqiRfv2Wx/5r4JuD1uh1sRNuSc3LttCx0QUgp2UwYd1BFsAt769guIgXQhQk3hC4xCs8PMxw==",
       "dependencies": {
         "@types/express": "*"
       }
@@ -2261,9 +2261,9 @@
       }
     },
     "node_modules/@types/express-session": {
-      "version": "1.17.7",
-      "resolved": "https://registry.npmjs.org/@types/express-session/-/express-session-1.17.7.tgz",
-      "integrity": "sha512-L25080PBYoRLu472HY/HNCxaXY8AaGgqGC8/p/8+BYMhG0RDOLQ1wpXOpAzr4Gi5TGozTKyJv5BVODM5UNyVMw==",
+      "version": "1.17.8",
+      "resolved": "https://registry.npmjs.org/@types/express-session/-/express-session-1.17.8.tgz",
+      "integrity": "sha512-bFF7/3wOldMn+56XyFRGY9ZzCr3JWhNSP2ajMPgTlbZR6BQOCHdAbNA9W5dMBPgMywpIP4zkmhxP6Opm/NRYMQ==",
       "dependencies": {
         "@types/express": "*"
       }
@@ -2410,9 +2410,9 @@
       }
     },
     "node_modules/@types/validator": {
-      "version": "13.11.1",
-      "resolved": "https://registry.npmjs.org/@types/validator/-/validator-13.11.1.tgz",
-      "integrity": "sha512-d/MUkJYdOeKycmm75Arql4M5+UuXmf4cHdHKsyw1GcvnNgL6s77UkgSgJ8TE/rI5PYsnwYq5jkcWBLuN/MpQ1A=="
+      "version": "13.11.2",
+      "resolved": "https://registry.npmjs.org/@types/validator/-/validator-13.11.2.tgz",
+      "integrity": "sha512-nIKVVQKT6kGKysnNt+xLobr+pFJNssJRi2s034wgWeFBUx01fI8BeHTW2TcRp7VcFu9QCYG8IlChTuovcm0oKQ=="
     },
     "node_modules/@types/webidl-conversions": {
       "version": "6.1.1",
@@ -12921,9 +12921,9 @@
       "integrity": "sha512-L7z9BgrNEcYyUYtF+HaEfiS5ebkh9jXqbszz7pC0hRBPaatV0XjSD3+eHrpqFemQfgwiFF0QPIarnIihIDn7OA=="
     },
     "@types/bcryptjs": {
-      "version": "2.4.3",
-      "resolved": "https://registry.npmjs.org/@types/bcryptjs/-/bcryptjs-2.4.3.tgz",
-      "integrity": "sha512-XTnH9E/rp51aKGsiMtQCHV/owDLW2E9QAxI7ItpWWm6Gi6XO1e4o3VuEYDma0lbitj1vNOBj05Qk8l2BYoiN4A=="
+      "version": "2.4.4",
+      "resolved": "https://registry.npmjs.org/@types/bcryptjs/-/bcryptjs-2.4.4.tgz",
+      "integrity": "sha512-9wlJI7k5gRyJEC4yrV7DubzNQFTPiykYxUA6lBtsk5NlOfW9oWLJ1HdIA4YtE+6C3i3mTpDQQEosJ2rVZfBWnw=="
     },
     "@types/body-parser": {
       "version": "1.19.0",
@@ -12935,9 +12935,9 @@
       }
     },
     "@types/compression": {
-      "version": "1.7.2",
-      "resolved": "https://registry.npmjs.org/@types/compression/-/compression-1.7.2.tgz",
-      "integrity": "sha512-lwEL4M/uAGWngWFLSG87ZDr2kLrbuR8p7X+QZB1OQlT+qkHsCPDVFnHPyXf4Vyl4yDDorNY+mAhosxkCvppatg==",
+      "version": "1.7.3",
+      "resolved": "https://registry.npmjs.org/@types/compression/-/compression-1.7.3.tgz",
+      "integrity": "sha512-rKquEGjebqizyHNMOpaE/4FdYR5VQiWFeesqYfvJU0seSEyB4625UGhNOO/qIkH10S3wftiV7oefc8WdLZ/gCQ==",
       "requires": {
         "@types/express": "*"
       }
@@ -12951,17 +12951,17 @@
       }
     },
     "@types/cookie-parser": {
-      "version": "1.4.3",
-      "resolved": "https://registry.npmjs.org/@types/cookie-parser/-/cookie-parser-1.4.3.tgz",
-      "integrity": "sha512-CqSKwFwefj4PzZ5n/iwad/bow2hTCh0FlNAeWLtQM3JA/NX/iYagIpWG2cf1bQKQ2c9gU2log5VUCrn7LDOs0w==",
+      "version": "1.4.4",
+      "resolved": "https://registry.npmjs.org/@types/cookie-parser/-/cookie-parser-1.4.4.tgz",
+      "integrity": "sha512-Var+aj5I6ZgIqsQ05N2V8q5OBrFfZXtIGWWDSrEYLIbMw758obagSwdGcLCjwh1Ga7M7+wj0SDIAaAC/WT7aaA==",
       "requires": {
         "@types/express": "*"
       }
     },
     "@types/express": {
-      "version": "4.17.17",
-      "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.17.tgz",
-      "integrity": "sha512-Q4FmmuLGBG58btUnfS1c1r/NQdlp3DMfGDGig8WhfpA2YRUtEkxAjkZb0yvplJGYdF1fsQ81iMDcH24sSCNC/Q==",
+      "version": "4.17.18",
+      "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.18.tgz",
+      "integrity": "sha512-Sxv8BSLLgsBYmcnGdGjjEjqET2U+AKAdCRODmMiq02FgjwuV75Ut85DRpvFjyw/Mk0vgUOliGRU0UUmuuZHByQ==",
       "requires": {
         "@types/body-parser": "*",
         "@types/express-serve-static-core": "^4.17.33",
@@ -12970,9 +12970,9 @@
       }
     },
     "@types/express-flash": {
-      "version": "0.0.2",
-      "resolved": "https://registry.npmjs.org/@types/express-flash/-/express-flash-0.0.2.tgz",
-      "integrity": "sha512-1l0s3YiZpMkWZ/65S4iSOLOnI7bYNDgnxx54nw5eA2pWOZ7Vvc7PpDv6iJq0bB7EBusoVWkzd+RV4r/nLY4/HA==",
+      "version": "0.0.3",
+      "resolved": "https://registry.npmjs.org/@types/express-flash/-/express-flash-0.0.3.tgz",
+      "integrity": "sha512-a48dRK2dtstVAmNqiRfv2Wx/5r4JuD1uh1sRNuSc3LttCx0QUgp2UwYd1BFsAt769guIgXQhQk3hC4xCs8PMxw==",
       "requires": {
         "@types/express": "*"
       }
@@ -12988,9 +12988,9 @@
       }
     },
     "@types/express-session": {
-      "version": "1.17.7",
-      "resolved": "https://registry.npmjs.org/@types/express-session/-/express-session-1.17.7.tgz",
-      "integrity": "sha512-L25080PBYoRLu472HY/HNCxaXY8AaGgqGC8/p/8+BYMhG0RDOLQ1wpXOpAzr4Gi5TGozTKyJv5BVODM5UNyVMw==",
+      "version": "1.17.8",
+      "resolved": "https://registry.npmjs.org/@types/express-session/-/express-session-1.17.8.tgz",
+      "integrity": "sha512-bFF7/3wOldMn+56XyFRGY9ZzCr3JWhNSP2ajMPgTlbZR6BQOCHdAbNA9W5dMBPgMywpIP4zkmhxP6Opm/NRYMQ==",
       "requires": {
         "@types/express": "*"
       }
@@ -13136,9 +13136,9 @@
       }
     },
     "@types/validator": {
-      "version": "13.11.1",
-      "resolved": "https://registry.npmjs.org/@types/validator/-/validator-13.11.1.tgz",
-      "integrity": "sha512-d/MUkJYdOeKycmm75Arql4M5+UuXmf4cHdHKsyw1GcvnNgL6s77UkgSgJ8TE/rI5PYsnwYq5jkcWBLuN/MpQ1A=="
+      "version": "13.11.2",
+      "resolved": "https://registry.npmjs.org/@types/validator/-/validator-13.11.2.tgz",
+      "integrity": "sha512-nIKVVQKT6kGKysnNt+xLobr+pFJNssJRi2s034wgWeFBUx01fI8BeHTW2TcRp7VcFu9QCYG8IlChTuovcm0oKQ=="
     },
     "@types/webidl-conversions": {
       "version": "6.1.1",
diff --git a/package.json b/package.json
index ce5f6113..eedadb7f 100644
--- a/package.json
+++ b/package.json
@@ -28,17 +28,17 @@
     "@mathigon/fermat": "1.1.11",
     "@mathigon/hilbert": "1.1.11",
     "@sendgrid/mail": "7.7.0",
-    "@types/bcryptjs": "2.4.3",
-    "@types/compression": "1.7.2",
-    "@types/cookie-parser": "1.4.3",
-    "@types/express": "4.17.17",
-    "@types/express-flash": "0.0.2",
-    "@types/express-session": "1.17.7",
+    "@types/bcryptjs": "2.4.4",
+    "@types/compression": "1.7.3",
+    "@types/cookie-parser": "1.4.4",
+    "@types/express": "4.17.18",
+    "@types/express-flash": "0.0.3",
+    "@types/express-session": "1.17.8",
     "@types/js-yaml": "4.0.5",
     "@types/lusca": "1.7.2",
     "@types/node-fetch": "2.6.4",
     "@types/pug": "2.0.6",
-    "@types/validator": "13.11.1",
+    "@types/validator": "13.11.2",
     "@webcomponents/custom-elements": "1.6.0",
     "autoprefixer": "10.4.15",
     "autotrack": "2.4.1",