Updated package to express 4, oauthio 0.3.1 and added CSRF tokens.

This update successfully allowed me to get CSRF tokens working, patched all the deprecated warnings and successfully authenticated using Google. Code is not super clean but it does the job!