Gavin Shaw

@mikfreedman Taking your approach all the way: In `api/app/controllers/concerns/retros_auth.rb`, the `user_allowed_to_perform_admin_action` function becomes: ``` def user_allowed_to_perform_admin_action? !GOOGLE_CLIENT.auth_setup? || valid_token_provided? end ``` Similarly in `api/lib/clients/google_client.rb` we would add a new method...

I think the ‘update_password’ is for setting a password on the retro board. Which could be set even if there is no oauth. I would need to check though.

Poking at it again and running it in docker etc, I can't work out where on the frontend the `update` and `update_password` get called. They are related to a retro...