feature: Remove security npm script since nsp is dead and gone

The security script might come back when this is merged and released:
npm/cli#125

app/templates/_package.json

@@ -23,8 +23,8 @@
   "private": true,
   "scripts": {
     "start": "npm-run-all clean:dev handlebars --parallel handlebars:watch webpack:server eslint:watch stylelint:watch --silent",
-    "build": "npm-run-all security test handlebars clean webpack --silent",
-    "build:dev": "npm-run-all security test handlebars clean:dev webpack:dev --silent",
+    "build": "npm-run-all test handlebars clean webpack --silent",
+    "build:dev": "npm-run-all test handlebars clean:dev webpack:dev --silent",
     "build:serve": "serve dist --open",
     "build:analyze": "npm run webpack:stats --silent && webpack-bundle-analyzer ./.webpack-stats.json ./dist -s parsed",
     "pretest": "npm run eslint --silent",
@@ -47,7 +47,6 @@
     "webpack:stats": "cross-env NODE_ENV=production webpack --config build/webpack.config.babel.js --profile --json > ./.webpack-stats.json",
     "handlebars": "babel-node build/handlebars.js",
     "handlebars:watch": "onchange \"src/**/*.hbs\" \"src/handlebars/helpers/*.js\" -- onerror \"npm run handlebars --silent\" -t \"Handlebars build failed\"",
-    "security": "nsp check",
     "clean": "del .webpack-assets.json dist",
     "clean:dev": "del .webpack-assets.json server",
     "postmerge": "npm install",
@@ -118,7 +117,6 @@
     "minimist": "^1.2.0",
     "node-sass": "^4.8.3",
     "npm-run-all": "^4.1.2",
-    "nsp": "^3.2.1",
     "ntl": "^3.0.0",
     "onchange": "^3.3.0",
     "perfy": "^1.1.2",