Updated test client ids.

Also added a web section to the mobile manifest.
Added the use of the web client id for fallback.

When Google Play Services is unavailable, we use the web authentication flow, which requires the web client id.  We expect it to be placed in the mobile manifest, under web.oauth2.client_id.  (This may change.)