updating package.json

the biggest change here right now is that i’m linking to a really nightmarish dependency chain – node-oauth appends a “type” field to oauth2 requests, which dropbox chokes on. it shouldn’t, but it does. so this links to a forked version of passport-oauth, which itself links to a forked version of node-oauth, which doesn’t append the offending field.

<whew>