Late to the conversation here, but I had to update .env.local, setting the env vars GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET correctly (as I had done already in .env), in order to get over the error 400.