working google oauth and sessions