Update curl_g2o

The key is stored in the args hash under the tag ":password", not ":key". But it did not matter, because args was not passed to sign_data at all. So, all requests were generated with "some password" as the key (salt) completely ignoring, whatever the user may have specified on command-line.
Also, the digest package is not needed -- requiring openssl is enough.