mongoose 3.8

Closes #21502.

Signed-off-by: Jack Nagel <jacknagel@gmail.com>
oath-toolkit 2.4.0

Closes #21504.

Signed-off-by: Jack Nagel <jacknagel@gmail.com>