diff --git a/Gemfile b/Gemfile
index 148f060d9..37831c58f 100644
--- a/Gemfile
+++ b/Gemfile
@@ -28,7 +28,7 @@ gem 'json-schema', '~> 2.8'
 gem 'librato-metrics', '~> 2.1.2'
 gem 'lograge'
 gem 'mime-types'
-gem 'omniauth', '~> 1.9'
+gem 'omniauth', '~> 2.0'
 gem 'omniauth-facebook', '~> 5.0'
 gem 'omniauth-google-oauth2'
 gem 'p3p', '~> 2.0'
diff --git a/Gemfile.lock b/Gemfile.lock
index 04ea07089..0c9ff8ac3 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -173,7 +173,7 @@ GEM
       guard (~> 2.1)
       guard-compat (~> 1.1)
       rspec (>= 2.99.0, < 4.0)
-    hashie (4.1.0)
+    hashie (5.0.0)
     hitimes (1.3.0)
     honeybadger (4.12.1)
     httparty (0.20.0)
@@ -253,9 +253,10 @@ GEM
       multi_json (~> 1.3)
       multi_xml (~> 0.5)
       rack (>= 1.2, < 3)
-    omniauth (1.9.1)
+    omniauth (2.0.4)
       hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
+      rack-protection
     omniauth-facebook (5.0.0)
       omniauth-oauth2 (~> 1.2)
     omniauth-google-oauth2 (0.5.4)
@@ -490,7 +491,7 @@ DEPENDENCIES
   mini_racer
   mock_redis
   newrelic_rpm
-  omniauth (~> 1.9)
+  omniauth (~> 2.0)
   omniauth-facebook (~> 5.0)
   omniauth-google-oauth2
   p3p (~> 2.0)