Bump on-headers, morgan and office-addin-sso (#134)

Bumps [on-headers](https://github.com/jshttp/on-headers) to 1.1.0 and updates ancestor dependencies [on-headers](https://github.com/jshttp/on-headers), [morgan](https://github.com/expressjs/morgan) and [office-addin-sso](https://github.com/OfficeDev/Office-Addin-Scripts). These dependencies need to be updated together.


Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](jshttp/on-headers@v1.0.2...v1.1.0)

Updates `morgan` from 1.9.1 to 1.10.1
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](expressjs/morgan@1.9.1...1.10.1)

Updates `office-addin-sso` from 3.0.4 to 3.0.6
- [Release notes](https://github.com/OfficeDev/Office-Addin-Scripts/releases)
- [Commits](https://github.com/OfficeDev/Office-Addin-Scripts/compare/office-addin-sso@3.0.4...office-addin-sso@3.0.6)

---
updated-dependencies:
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
- dependency-name: morgan
  dependency-version: 1.10.1
  dependency-type: direct:production
- dependency-name: office-addin-sso
  dependency-version: 3.0.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

package-lock.json

@@ -39,9 +39,9 @@
     "jquery": "^3.5.1",
     "jsonwebtoken": "9.0.0",
     "jwks-rsa": "2.1.4",
-    "morgan": "1.9.1",
+    "morgan": "1.10.1",
     "node-fetch": "^2.6.1",
-    "office-addin-sso": "^3.0.4",
+    "office-addin-sso": "^3.0.6",
     "regenerator-runtime": "^0.14.1",
     "webpack-node-externals": "^3.0.0"
   },