Make authentication work in production

* Uses Google+ (though a + account is not required).
* The previous method was deprecated and due to be shut down this year.
* For local use, environment variables are required. These can be
  set up at https://console.developers.google.com/ under Credentials;
  they should be set in GPLUS_CLIENT_ID and GPLUS_CLIENT_SECRET.