Omniauth shibboleth version
Fixes #641 (closed)
Set minimum version of omniauth-shibboleth gem to 1.1.2 since lower versions cannot use session state passed in headers which is, at least for now, the only way to make it work with Shibboleth SP and Apache/nginx.