Google oauth with hidden keys