update auth to work with new oauth2 package API

The oauth2 package has changed API design.  New spec here:
https://godoc.org/github.com/golang/oauth2