build(deps): bump on-headers and express-session in /server

---
updated-dependencies:
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
- dependency-name: express-session
  dependency-version: 1.18.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

server/package-lock.json

@@ -93,7 +93,7 @@
     "csv-writer": "^1.6.0",
     "dotenv": "^16.0.2",
     "express": "^4.21.1",
-    "express-session": "^1.18.1",
+    "express-session": "^1.18.2",
     "helmet": "^4.3.1",
     "jsondiffpatch": "^0.4.1",
     "jsonwebtoken": "^9.0.0",