* Update deps (Raymond Feng)

 * resolves inconsistency of info.accessToken.ttl (which is in seconds) and maxAge of res.cookie (which is in milliseconds) (Andrey Loukhnov)

 * support use of custom function for creating access token (Vine Brancho)

 * added support for username and email for logging in with local auth strategy (britztopher)