Swap the order of how the XHR requests are set up.
fix JSHint errors
Merge pull request #117 from mozilla/issue_116-session-ie8-win7

Swap the order of how the XHR objects are created
make sure error isn't null
Merge pull request #118 from mozilla/error-message-null-crasher

make sure error isn't null
Merge pull request #108 from mozilla/kill-csrf

dont need to keep csrf in cookie
Merge pull request #109 from mozilla/x-frame

add X-FRAME-OPTIONS to all but /provision
Hook up sideshow to Google's OAuth2 endpoint instead of OpenID endpoint.
Cleanup

* Rename discoverOAuthService to discoverUserInfoService
* Split up getUserInfoForClient from getEmailForClient
Rename REDIRECT to REDIRECT_URI to match Google's documentation.
Fix the tests!

* Make JSHint happy
* Update the mockid to act like a Google API mock
Code cleanup.
Put the clientId and clientSecret under the google namespace
Specify fake google.clientId and google.clientSecret for automated testing.
Split off the main oauth interface from the google oauth provider.
Turn GoogleInfoService into its own object.
Rename getOAuthProvider to getOAuthClient/gI
Resize the dialog window to handle Google's layout.

Add 50px before redirecting to Google.
Subtract 50px after leaving Google.
remove setGoogleApis from sideshow.js, it's not needed there.
More cleanup.