Corrected AOP permissions checking config for webhooks.
Fixed logic in permissions checker to ensure token is for the right
user.
Merge pull request #180 from ORCID/dev-accessTokenFix

Fixed logic in permissions checker to ensure token is for the right user.