AccessToken verification provides a token instance instead of boolean. This eliminates looking up the token a second time in /v1/user routes