Along with allowing 'less secure apps', the link below must also be clicked on when serverless email is used for an account (account feature, Mail Service = 3) and Gmail.
https://accounts.google.com/b/0/displayunlockcaptcha
This is an additional layer of security that must be allowed before incoming email will work: