To use oAuth, the web application has to be approved by Google for production use. e.g., if you have Mumara installed on domainabc.com, you'll need to get this domain approved by Google to use sensitive scopes, e.g., accessing a gmaill account, etc. So it's an even more difficult and lengthy...