Update gtm-oauth2 to use an appropriate version of SBJson; switch both sources over to using https
:sparkles: asterisks :sparkles:
Merge pull request #6398 from jashephe/fix-gtm-oauth2-deps

Update gtm-oauth2 to use an appropriate version of SBJson