Update dependencies to support OmniAuth 2.1

Update dependencies to versions that will allow us to install OmniAuth 2.1.

Allowing GET Requests

In the scenario you absolutely must use GET requests as an allowed request method for authentication, you can override the protection provided with the following config override:

Allowing GET requests will expose you to CVE-2015-9284

OmniAuth.config.allowed_request_methods = [:get, :post]

Initial forked version

Initial working version of the fork that we will use.