update passport deps (tested uploads still work)