Omniauth and CVE-2015-9284 with an API-only Rails app

Question

Updating Omniauth to use POST requests to /auth/:provider is documented here:

https://github.com/omniauth/omniauth/releases/tag/v2.0.0

Unfortunately, I\'m using an