Update url-parse to latest version to mitigate Security issue.

[AndyDudleyAdvanced]

Fixes GHSA-hgjh-723h-mx2j

referenced in this issue:

#260

[awaterma]

@colincasey -- should we consider this p/r or a major version update for 5.0?

[colincasey]

@awaterma I've already commented on #260 as to why this isn't a security issue for our published version of tough-cookie but I will restate it here. When you npm install tough-cookie it currently resolves the url-parse dependency to version 1.5.10 which is not affected by the vulnerability noted in this PR since the range declared in package.json is ^1.5.3.