upgrade oauth-js