only run hostdiscovery once in development
redirect to google openid instead of homepage when auth is required and not present