loosening the version restrictions for omniauth
bumping dependency on omniauth-oath