Require omniauth 1.1.1 to avoid http://www.rubysec.com/advisories/CVE-2012-6134/