* OmniAuth v2 just around the corner: https://gitlab.com/gitlab-org/gitlab/-/issues/30073
* When I upgraded the dependency for omniauth_crowd in a draft MR, some specs started
  breaking.
* OmniAuth v2 converts all GET requests to POST requests by default
  with CSRF protection.
* This approach similar to what we did for omniauth-cas3: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/96804