user/self end point method to verify the owner of an access token.