fix package.json version

Signed-off-by: Thibaud Arnault <thyb@oauth.io>