FreeSHR now gets user info from identity server given a token, thus validating token