Got google validating access_tokens.  Changed the client to upload the entire access_token object.  This was unnecesary, but easy and adds more info.  Just makes it tricky to use validateToken.php.
Tweaked.. Client can now login