[nofix] use explicit token generator, oauth2 of google sucks balls