RubyGem omniauth-facebook has an access token security vulnerability
omniauth-facebook project omniauth-facebook