Update omniauth

Fix for CSRF vulnerability