Added support for checking and basing resource access on user IDs sent by the authorization server.
Updated some comments.
Changed name of method that validates the access token.  Added some more comments.