REP-894 Validate token project-id in URI

So I didn't even have to write a custom (un)marshaller, despite our custom RAX-AUTH:projectId thing. It was just a matter of passing the named fields into the jsonFormat function and letting it do the work for me.
jorgew> Yes roles  arecase sensituve.