relax oauth2 dependency to ~> 1.2

omniauth-google-oauth2 and asana already defines it ~> 1.0.

@connorshea