Replace deprecated cookie based auth with GoogleLogin header and a new Redis backed session store