Vendor omniauth-oauth2 + add Request-Id tracking

Adds Request-Id tracking during the callback phase by adding an extra
configuration option that allows a request ID to be fetched from the
environment via a lambda.

Because this would otherwise require major monkey patching, I've
vendored in omniauth-oauth2 for versioning safety.