fix socket io url to be dynamic
transition to google oauth2
move listening to app.js