wired up google bearer token between client and server. got secure route working