fetching a token requires GCLOUD_CLIENT_ID and GCLOUD_CLIENT_SECRET to be set