Fix deps

I'm not sure if oauth2 follow semver, but `0.6.0` isn't compatible with this repo. Let me know if you want to apply new mandatory call back functions and i'll create a branch for that.

For now, i think this commit is sufficient.