Google sign-in spike

Flow (b): code + PKCE on api.

Sign in: code + PKCE, with client secret Sign in: code + PKCE, no client secret

Flow (a): GIS redirect mode

State

(no sign-in result in the URL)
…