Fixes an outstanding vulnerability in omniauth-oauth2

See: https://github.com/intridea/omniauth-oauth2/pull/25