Bump otr.js

This is a security fix. Details at,
https://github.com/arlolra/otr/commit/e6844e094c9ed30af1f3bf663ff0f7bc9fa4816b