Updated dependencies to enable auto 'state' param handling

The latest version of passport-oauth2 allows the state param to be created and validated transparently. Updating the dependency here allows us to use this by setting state: true on the strategy options.