Update to pug 2.0.1 to fix express fortunes test again (#3388)
They seem to use inexact versions in their dependencies and then they
release breaking updates to those dependencies. If this happens a third
time, let's consider other options such as adding a package-lock file.
https://github.com/pugjs/pug/issues/2979