Restrict omniauth dependency to ~> 1.0