GoogleConfiguration fixes - now the included google key and secret can

redirect you back to localhost which should be enough for unit testing,
I don't think it's a point of attack as there's no way to get in the
middle. The proper way to launch production is now:

$ GOOGLE_API_KEY=<real_key> GOOGLE_API_SECRET=<real_secret> mvn
jetty:run