fix express oauth bug and bump version