pin simple_oauth to 0.2.0

see https://github.com/laserlemon/simple_oauth/issues/19