fake full-page oauth2 login interface

- observed browserified
- self-contained mock image encoding
- remove unused mock
- fake redirect-based Google Oauth2