token introspection now returns user "sub" when available in addition to "user_id", closes #507 (might cause incompatibility problems)