Use the non-ga4gh coverage APIs when necessary

If and only if the referenceSetId field does not exist, fall back to
the coverage APIs.
Fixes #8
Add oauth2client library
Add grantaccess page and require login
Switch from api key to oauth for auth
Change appengine id