Bump dependency with omniauth-heroku

Bro, can I haz a pre release so people can help test the latest omniauth-heroku?

The change with `fetch_info` is obviously pretty safe/harmless, but more significantly it also bumped dependencies to omniauth and omniauth-oauth2.