Revert "Correct patched versions for omniauth-oauth2"

After manual inspection of 1.1.1, I can confirm the CSRF fix is indeed present in 1.1.1. I have asked the maintainers to update the CVE.