I am using (OpenId+OAuth) hybrid protocol.
After I redirect user to \"https://www.google.com/accounts/o8/ud\" with all openid and oauth extension parameters, user is abl
pls see Bob and my comments. % escaping can be an issue if you are facing same problem as mine. oauth_verifier is indeed not required in hybrid mode.