update omniauth-oauth2 deps

closes #3