GPII-1050: Some OAuth2 Express clean-up

- Address deprecation warnings
- Apply the body-parser at sites of usage rather than globally