Add a before filter to the APIs that validates the user with Google. Add the person, authorization, and role models.