major cleanups, move to tokenintrospection spec instead of googles protocol