Upgrade everyauth to 0.4.9 which upgrades requests from the very old
2.9.x and brings in security fixes for everyauth dependencies too :

https://github.com/bnoguchi/everyauth/commit/9d36657e5270c92befc7b6e86758f6ef0e7d4d55
Merge pull request #17 from kcrayon/master

add option to set hostname
Merge pull request #18 from powershop/upgrade_request

Upgrade everyauth to 0.4.9 which upgrades requests from the very old
better error messages
ensure /_doorman/* requests never get proxied to backend
add requiredEmail array to configuration; also allow requiredDomain and requiredOrganization to be arrays
clear out flash when backend error
upgrade to 0.3.0
don't set up module config if module is not actually loaded
simplify session cookie options