How Google solved authorization globally across all its products