Put ENABLE_GOOGLE_AUTH setting back

No, it appears this fixes #349. Note `session.get('user')` would return `None`, which would avoid line 45 raising the `AttributeError`.