bug fixes and popup window sizing

* bind OAuthRedirect better
* onRedirect needed hash not location.hash
* fix auth_url in defaults for Google config