Hermes Google OAuth callback server is running

Open an SSH tunnel first: ssh -L 8080:127.0.0.1:8080 root@SERVER. Then open the Google authorization link in the same computer's browser. Google will redirect to http://localhost:8080; the tunnel forwards it here securely.