Update vows dependency for 0.10 support
Pass req to serialize/deserialize callbacks

This allows for greater flexibility. This should be backwards
compatible with existing plugins.