Bump url-parse to latest (#124)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-URLPARSE-2401205

Author: snyk-bot

package-lock.json

@@ -72,7 +72,7 @@
     "lodash.noop": "^3.0.1",
     "path-to-regexp": "^1.7.0",
     "react-sweet-state": "^2.5.1",
-    "url-parse": "^1.4.5"
+    "url-parse": "^1.5.6"
   },
   "devDependencies": {
     "@babel/cli": "^7.5.5",