upgrade deps: cors, request, passport, passport-oath, mkdirp