Update curl_g2o

The key is stored in the args hash under the tag ":password", not ":key". But it did not matter, because args was not passed to sign_data at all.
Also, the digest package is not needed -- requiring openssl is enough.