Fixing issue #8. The omniauth-oauth2 version 1.1.1 has a CSRF
vulnerability (CVE-2012-6134). The patch is already merged in the git
repository but there are no further gem releases. The suggested
mitigation is to tell your Gemfile to fetch the code directly from
github rather then using rubygems.org