diff --git a/Gemfile b/Gemfile
index 0414a15..737e78b 100644
--- a/Gemfile
+++ b/Gemfile
@@ -5,7 +5,7 @@ ruby '2.6.6'
 #clearance is an email/password login, with pw reset option
 
 #omniauth is for SSO stuff, if we decide to incorporate that
-gem 'omniauth', '~> 1.9.1'
+gem 'omniauth', '~> 2.0.0'
 #hashie works in tandem with omniauth gem
 gem 'hashie', '~> 4.1.0'
 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
diff --git a/Gemfile.lock b/Gemfile.lock
index 7aea8d7..66aab07 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -189,9 +189,10 @@ GEM
       mini_portile2 (~> 2.4.0)
     nokogiri (1.10.10-x64-mingw32)
       mini_portile2 (~> 2.4.0)
-    omniauth (1.9.1)
+    omniauth (2.0.0)
       hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
+      rack-protection
     protobuf-cucumber (3.10.8)
       activesupport (>= 3.2)
       middleware
@@ -199,7 +200,9 @@ GEM
       thread_safe
     public_suffix (4.0.6)
     puma (3.12.6)
-    rack (2.2.3)
+    rack (2.2.6.2)
+    rack-protection (3.0.5)
+      rack
     rack-test (1.1.0)
       rack (>= 1.0, < 3)
     rails-dom-testing (2.0.3)
@@ -297,7 +300,7 @@ DEPENDENCIES
   hashie (~> 4.1.0)
   jbuilder (~> 2.5)
   listen
-  omniauth (~> 1.9.1)
+  omniauth (~> 2.0.0)
   puma (~> 3.11)
   rails!
   rspec-rails