Add AES GCM encryption/decryption to auth

Add signing key to Auth

Abstract key generation and Auth init to their own funcs.
Cleanup and DRY unit tests.

Use same code parameter in auth redirect

Cleanup auth and add tests for enc/dec oauth code

Add acceptance test for fix

Apply suggestion from review

Add missing test and apply feedback

Fix unit test

Simplify acceptance test