Moved a lot of stuff around because it's more generic OAuth2 authentication instead of just Google authentication
The Access Token response is no longer responsible for providing the JWT, since this is non-standard