updated dependencies to mention oauth-js