Add Google OAuth endpoints and isLoggedIn middleware to restrict access