fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BROWSERSLIST-1090194

Author: snyk-bot

package.json

@@ -24,7 +24,7 @@
     "react-scripts": "./bin/react-scripts.js"
   },
   "dependencies": {
-    "autoprefixer": "6.3.7",
+    "autoprefixer": "9.0.0",
     "babel-core": "6.10.4",
     "babel-eslint": "6.1.2",
     "babel-loader": "6.2.4",
@@ -37,7 +37,7 @@
     "babel-preset-react": "6.11.1",
     "chalk": "1.1.3",
     "cross-spawn": "4.0.0",
-    "css-loader": "0.23.1",
+    "css-loader": "1.0.0",
     "eslint": "3.1.1",
     "eslint-loader": "1.4.1",
     "eslint-plugin-import": "1.10.3",