joshsoftware/sso-devise-omniauth-client — comment on commit a8e2ae512ddfcca68e1492ce0110233f7644d55f
File:  line 0
By lda:

This was my ugly hack and I think it should not be in this place. Instead of using this we need extract token from HTTP_AUTHORIZATION http header on the provider side (see http://stackoverflow.com/questions/8205927/omniauth-single-sign-on-with-devise-invalid-credentials)