update doorkeeper to 1.4.1

Addresses missing CSRF protection found added in https://github.com/doorkeeper-gem/doorkeeper/commit/c1b5c45e2c42c0191ca9f12a2836e31ee1a8de57.