Bump path-to-regexp and express in /templates/todo/api/js

Bump path-to-regexp and express in /templates/todo/api/js #1789