Fixed 'CSRF detected' with new versions of omniauth-oauth2