Use the same SSO_CLIENT_ID for all hosts
Update Omniauth client_secret at login time