Fix lodash vulnerability by upgrading version of async. See https://github.com/lodash/lodash/pull/4336