Reworked OAuth2 logic to reject different authenticated email address; add CSS