OWIN Middleware to validate access tokens from IdentityServer v3