Lock upstream omniauth and omniauth-oauth2 versions temporary.

@mkdynamic I found that some changes in upstream broke [tests](https://travis-ci.org/zizkovrb/omniauth-facebook/jobs/17388380). Until I resolve this problem, it's good idea to lock dependencies to avoid unexpected behaviour.