Fixes #33. Use session token for googleauth login to protect from CSRF