Update oauth2 version requirement

Ran into a bundler conflict today after OAuth2 was updated to 0.9.0. This should fix it!