ignoring server config (sensitive data here)
google OAuth working