update dependency of oauth2