fix implicit dependency of omniauth-oauth2