check Google token before sending to backend