Buggy version of node-jose breaks node-forge for other consumers

[jportner]

I found this bug when using Kibana, details here: elastic/kibana#122054.

In a nutshell:
The node-jose 1.1.0 dependency includes a bug that unintentionally changes the node-forge implementation of ByteBuffer. This affects other consumers of node-forge, which is how we discovered the linked Kibana issue.

This is a known issue in node-jose that was fixed in the 1.1.4 release but was not mentioned in the changelog.

This package should upgrade to node-jose 1.1.4 or 2.0.0 (note that the latter drops support for Node 6 and Node 8).