Add more informative logging on auth failure.
Treat tokens as realm-independent.
Begin WebAuth user information service integration.