[sec] gmail authentication fixes