Next.js security update

Patched the React Server Components CVE and bumped Next.js, with safer cookie handling.