The redirect URI in the request, http://gsa.prixa.org/accounts/google/login/callback/, does not match the ones authorized for the OAuth client. To update the authorized redirect URIs, visit: https://console.developers.google.com/apis/credentials/oauthclient/242477145300-r1bhgiuddkogt71n6anbtvbraj3p4pm6.apps.googleusercontent.com?project=242477145300