To enable live Google single sign-on:
1. Register an OAuth application in your Google Developer Console.
2. Set the Authorized Redirect URI to:
http://pictura.exit-code.net/auth/google/callback
3. Provide client credentials in your environment or .env file:
export GOOGLE_CLIENT_ID=your_client_id
export GOOGLE_CLIENT_SECRET=your_client_secret