Validate user's google acccess token before trying to list files. In #groups, check for LTI's api_token in header. Embed api_token in designer lab view for retrieval.