Bump koa dependencies
Is there a repo for `grant-koa`, the meta package locked `koa-session` to 3.0.0 and it throws errors when used with 3.1.0

Having meta package also lead to a few problems: we can't contribute easily or debug package (ie. temporally fork the repo and set package.json to use `forked/grant`)
