Better log messages on authentication failure (see #38)
Use http-conduit for calls to Google
Fix typo in log message
DRY up Host header extraction
Whitespace change
Respond with 400 if callback from Google does not give code query param
Return 400 on missing Host header + log warning
Whitespace change
Relax base dependency
bob-auth (wip)
Remove test-suite