updated gems and yarn dependencies (#2179) ...

* updated gems and yarn dependencies

* updated yarn

* added csrf gem to deal with omniauth vulnerability

* add in explicit disable of non-post omniauth methods, add ignore statement tobundle audit so Travis can run the remaining tests

* replaced depricated Faker::StarWars with new Faker::Movies::StarWars

* downgrading timeago.js to 4.0.0beta.1 from *beta.2

swap pager_api for api_pagination due to jbuilder compatability

added plans fulltext api using pagination

Merge pull request #2131 from DigitalCurationCentre/feature/reviewer_role ...

fix label on share permissions for reviewer