Lock upstream omniauth and omniauth-oauth2 versions temporary.