Dependency on `oauth` is not precise enough

[tmeasday]

This package depends on [email protected], however it does not work with lower versions (in particular 0.9.7, see: https://github.com/jaredhanson/passport-github/issues/56).

Perhaps the dependency should be updated to reflect this?