Bump tough-cookie and web3 in /demo/react-app

Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) to 4.1.3 and updates ancestor dependency [web3](https://github.com/ChainSafe/web3.js). These dependencies need to be updated together.


Updates `tough-cookie` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3)

Updates `web3` from 1.10.0 to 4.0.2
- [Release notes](https://github.com/ChainSafe/web3.js/releases)
- [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md)
- [Commits](web3/web3.js@v1.10.0...v4.0.2)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: web3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>