oauth2 is a hard dependency
bump version