There is some duplication of this extra optional parameter everywhere. However, with canvas auth controller likely going away (since we don't need to manually link up canvas tokens anymore), these extra parameters can probably be removed then from the base auth_controller, simplifying everything down just to the google_auth_controller.