It's the Google OAuth endpoint.  I want to give that URL a closer look at some point, challenging whether we actually need the offline access permission.  I may at that point try to make it less magic.