Bump tough-cookie and web3 in /demo/vue-app

Removes [tough-cookie](https://github.com/salesforce/tough-cookie). It's no longer used after updating ancestor dependency [web3](https://github.com/ChainSafe/web3.js). These dependencies need to be updated together.


Removes `tough-cookie`

Updates `web3` from 1.10.0 to 4.0.2
- [Release notes](https://github.com/ChainSafe/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md)
- [Commits](web3/web3.js@v1.10.0...v4.0.2)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: web3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>