Updated dependencies to enable auto 'state' param handling

The latest version of passport-oauth2 allows the `state` param to be created and validated transparently. Updating the dependency here allows us to use this by setting `state: true` on the strategy options.