UrlPattern: don't expose instances if they are never used
browser GoogleOAuth2 class: locking down instance variables
fixed runtime error w/ safe_http_server