bump omniauth-oauth2 dep to 1.2.x