added oauth2 to GEMFILE

also update characters controller to test oauth