make API call on LTI launch to ensure valid token

fixes #6
add rack-iframe to better support IE

fixes #4
credit to @Kulgar for finding