Move GOOGLE_SCOPES, AUTH_CONFIG from secrets to basehandlers