There are some changes to package-lock.json because I installed a newer patch of NPM. Would you like me not to do that in the future?

I noticed that getRealms is also being called in the report-editor page and the users page. In the users table, the user can sort by any column of the table, so the order it gets the realms is unimportant. On the report-editor page, the only place where it uses the realms is if the user is a super-admin, in which case it gives an option to replace the user who created the report with any other user in any realm, using a dropdown that groups users by realm. It doesn't seem to be sorting the groups alphabetically, but the code is a little over my head, and it seems like a very niche use-case. Do you want me to try to address that?

I think this PR is good as-is, thanks for making the suggested change!