The check_token endpoint checks approvals

The check_token endpoint rejects access tokens with updated/denied approvals or for users that
have changed their passwords.

[#42875031]