set callback back to initer url and added local session based loop prevention as a temporary fix while google gets over failing to recognise an authorised redirect uri