Update vows dependency for 0.10 support
Pass req to serialize/deserialize callbacks

This allows for greater flexibility. This should be backwards
compatible with existing plugins.
pass correct reference of request to serializeUser
Fix merge conflicts.
Default req to undefined for backwards compatibility.
DRYer.
More narrowly scope try-catch blocks.