omniauth-oauth2 project Omniauth Oauth2 Vulnerabilities