add x-entitlement to introspection endpoint, update accompanying tests