Added extra logging

This is to display the serialized stream before parsing on FINEST level to
help diagnose JWT errors.
Removed restClient param and shifted logic for token and userinfo

token and userinfo retrieval is shifted to the top of the validate method
in order to allow access to the data from the cookie if it is already
present.