Fix str-bytes mismatch of Google authentication on Python 3

Google authentication was broken on Python 3, because Tornado’s `RequestHandler.get_secure_cookie()` method returns `bytes` instead of `str` on Python 3.  I made it to decode the secured cookie if it’s not a string but a byte array.