Limit sneakpeek middleware from acting on API-like request

Impose the following restrictions on setting up sneakpeek
* Has to be a GET
* Cannot be a machine callback to handler from xqueue or xblock
* Cannot be trying to list the LTI endpoints