Bump cookie and express (#400)

Bumps [cookie](https://github.com/jshttp/cookie) to 0.7.1 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `cookie` from 0.6.0 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.6.0...v0.7.1)

Updates `express` from 4.19.2 to 4.21.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md)
- [Commits](expressjs/express@4.19.2...4.21.1)

---
updated-dependencies:
- dependency-name: cookie
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gerald Venzl <gerald.venzl@oracle.com>

Author: dependabot[bot]

javascript/rest-api/part-2-database-basics/hr_app/package-lock.json

@@ -9,7 +9,7 @@
   "keywords": [],
   "license": "Apache-2.0",
   "dependencies": {
-    "express": "^4.19.2",
+    "express": "^4.21.1",
     "morgan": "^1.10.0",
     "oracledb": "^5.1.0"
   }