Security Issue with deep dependency "hoek"

[kamesh95]

OWASP Security check fails on this passport-wsfed-saml2 module as there is a deep dependency hoek v0.9.1 that's vulnerable to a Prototype pollution attack - https://nodesecurity.io/advisories/566. The issue was however patched in the later versions but it still exists in passport-wsfed-saml2 because of old cryptiles module. The dependency breakdown is - (cryptiles -> boom -> hoek). Cryptiles is dependent on boom which in turn is dependent on hoek. The boom package has upgraded hoek and also the cryptiles package has upgraded boom in turn but passport-wsfed-saml2 is dependent on old cryptiles version. Please upgrade the cryptiles module version so that the vulnerability is resolved. Thanks.

[kamesh95]

@mikeops Can we upgrade cryptiles without breaking things? Do you know the reason why Travis build failed?