userinfo is already decoded at both call sites.
Merge bug25861