Fix all the things

[chbonser]

• Fix 'Invalid Version' error by hardening the version comparison function. It now pushes invalid versions to the end (earliest) version instead of throw an exception and crashing the app.
• Replace deprecated lodash includes with contains
• Adjust server setup to only terminate https when the HTTPS_KEY variable is set
• Add a yarn.lock file because deploying a production server without a lock file is too great a security risk
• Add a Procfile so heroku uses the right command to run the app
• Wrap the the launch script bin/web.js in a try catch block so tailing the log provides an error and backtrace when it fails
• Replace the urljoin.js package with the more used url-join package