youtube must have approval_type=force so we get a refresh token

all of our google services need to have this (and do) because when a
reauth happens we just replace the auth object and throw away the
refresh token that we need. approval_type=force makes a refresh_token
come back each time, but is annoying for the user if the app is using
singly for login