downgrade oauth2 dependency for compatibility with omniauth-facebook gem