Configure OAuth2 endpoints and provider

Don't read from `process.env`, use the `$FOO` substitution since this will run in browser