Merge pull request #25 from fourq/master

bumped `tough-cookie` version to 2.3.1 to resolve ReDoS vulnerability (NSP advisory 130)

package.json

@@ -1,6 +1,6 @@
 {
   "name": "bhttp",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "description": "A sane HTTP client library for Node.js with Streams2 support.",
   "main": "index.js",
   "scripts": {
@@ -35,7 +35,7 @@
     "string": "^3.0.0",
     "through2-sink": "^1.0.0",
     "through2-spy": "^1.2.0",
-    "tough-cookie": "^0.12.1"
+    "tough-cookie": "^2.3.1"
   },
   "devDependencies": {
     "gulp": "~3.8.0",