Finally got google authentication fully working. Still need to work out how to protect API from attacks and secure Client <-> API communications.