Bump xlsx from 0.16.8 to 0.17.0

Bumps [xlsx](https://github.com/SheetJS/sheetjs) from 0.16.8 to 0.17.0.
- [Release notes](https://github.com/SheetJS/sheetjs/releases)
- [Changelog](https://github.com/SheetJS/sheetjs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/SheetJS/sheetjs/compare/v0.16.8...v0.17.0)

---
updated-dependencies:
- dependency-name: xlsx
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

package.json

@@ -34,7 +34,7 @@
     "object-hash": "^1.3.0",
     "ramda": "^0.25.0",
     "resource-router-middleware": "^0.6.0",
-    "xlsx": "^0.16.8"
+    "xlsx": "^0.17.0"
   },
   "devDependencies": {
     "@babel/cli": "^7.1.2",

src/api/index.js

@@ -1,7 +1,5 @@
 import { version } from '../../package.json'
-import fetch from 'node-fetch'
 import { Router } from 'express'
-import { getParameterByName } from '../lib/util'
 import copy from '../copy/en'
 
 export default ({ config, controller }) => {
@@ -24,21 +22,6 @@ export default ({ config, controller }) => {
     })
   })
 
-  api.get('/media/:code', (req, res) => {
-    const { code } = req.params
-    fetch(`${process.env.MEDIA_API_ENDPOINT}/${code}`, {
-      method: 'get',
-      headers: {
-        'Authorization': 'Basic ' + new Buffer(process.env.MEDIA_AUTH_USER + ":" + process.env.MEDIA_AUTH_PWORD).toString("base64")
-      }
-    })
-    .then(response => response.json())
-    .then(data => res.send(data))
-    .catch(err => {
-      res.status(err.status || 404).send({ error: err.message })
-    });
-  })
-
   api.get('/update', (req, res) => {
     controller
       .update()