Refactor to perform Google API auth within iFrame on server. That keeps the domain constant (either treesheets.org or localhost)