make user_info endpoint available so clients no longer need to interact with tokeninfo endpoint