fixed google-api requires and development mode encrypted cookie secret