Lock down omniauth-oauth2 version and a little refactor

These changes should probably be in two different pull requests but I'm lazy :laughing: 

I added a version constraint to the `omniauth-oauth2` gem because of issue #100.

As for the refactor, it just breaks up the `image_url` method I created initially into 3 smaller, more concise methods.