Bump otr.js

 * This is a security fix. Details at,
   https://github.com/arlolra/otr/commit/e6844e094c9ed30af1f3bf663ff0f7bc9fa4816b
Merge pull request #626 from arlolra/otr

Bump otr.js