Bump vue from 2.5.19 to 2.5.20 in /apps/oauth2

Bumps [vue](https://github.com/vuejs/vue) from 2.5.19 to 2.5.20.
- [Release notes](https://github.com/vuejs/vue/releases)
- [Commits](https://github.com/vuejs/vue/compare/v2.5.19...v2.5.20)

Signed-off-by: dependabot[bot] <support@dependabot.com>

apps/oauth2/package-lock.json

@@ -4347,9 +4347,9 @@
       }
     },
     "vue": {
-      "version": "2.5.19",
-      "resolved": "https://registry.npmjs.org/vue/-/vue-2.5.19.tgz",
-      "integrity": "sha512-zs7w/dy/yMTCcUunUl05UHhYEI2bt67R7G2jD42HnJ28JxCtC1FY8zZ9GU4PF2SJP8Ff/B9HyojWk/NztqKfFA=="
+      "version": "2.5.20",
+      "resolved": "https://registry.npmjs.org/vue/-/vue-2.5.20.tgz",
+      "integrity": "sha512-kVLZi8RWOk8qwAt+a0bVDy9VV5Zzcnj0fLCMyKLx1dmEBjqmYJYRWHvPwiypiJBtJkdmROy5NP5hyDqTdfBcvQ=="
     },
     "vue-hot-reload-api": {
       "version": "2.3.1",

apps/oauth2/package.json

@@ -17,7 +17,7 @@
   },
   "dependencies": {
     "nextcloud-axios": "^0.1.3",
-    "vue": "^2.5.19"
+    "vue": "^2.5.20"
   },
   "devDependencies": {
     "css-loader": "^2.0.0",