Fixes for #2 and #6: id_token + bearer tokeninfo API in dev_appserver

This is a "clean" CL based on master branch and merges all changes that would fix the following issues:

* #6 Use tokeninfo API for Bearer token validation in dev_appserver 
* #2 Get user information from the id_token or oauth token in the request