add always true grant checking option
add endpoint to display auth token
hack in adding user identities
cli
fix token validation