diff --git a/src/Website/packages.config b/src/Website/packages.config
index 7b3d21c..c347e53 100644
--- a/src/Website/packages.config
+++ b/src/Website/packages.config
@@ -32,7 +32,7 @@
   <package id="Microsoft.Owin.Security" version="3.0.1" targetFramework="net45" />
   <package id="Microsoft.Owin.Security.Cookies" version="3.0.1" targetFramework="net45" />
   <package id="Microsoft.Owin.Security.Jwt" version="3.0.1" targetFramework="net45" />
-  <package id="Microsoft.Owin.Security.OAuth" version="3.0.1" targetFramework="net45" />
+  <package id="Microsoft.Owin.Security.OAuth" version="4.2.0" targetFramework="net45" />
   <package id="Microsoft.Owin.Security.OpenIdConnect" version="3.0.1" targetFramework="net45" />
   <package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net45" />
   <package id="Modernizr" version="2.6.2" targetFramework="net45" />
diff --git a/test/Website.UnitTests/packages.config b/test/Website.UnitTests/packages.config
index 8cce8e4..3ba5a37 100644
--- a/test/Website.UnitTests/packages.config
+++ b/test/Website.UnitTests/packages.config
@@ -10,7 +10,7 @@
   <package id="Microsoft.AspNet.WebPages" version="3.2.3" targetFramework="net46" />
   <package id="Microsoft.Owin" version="3.0.1" targetFramework="net45" />
   <package id="Microsoft.Owin.Security" version="3.0.1" targetFramework="net45" />
-  <package id="Microsoft.Owin.Security.OAuth" version="3.0.1" targetFramework="net46" />
+  <package id="Microsoft.Owin.Security.OAuth" version="4.2.0" targetFramework="net46" />
   <package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net46" />
   <package id="Moq" version="4.2.1507.118" targetFramework="net45" />
   <package id="Newtonsoft.Json" version="6.0.4" targetFramework="net45" />