Fix to pass test on /authorized route looking for user_id
Changed parameter for the profile photo URL from 'photo' to 'photo_url'
Combined ServiceAccessToken and User selection in to single query
Added a couple of tests to cover the additional display_name and photo_url params in the /authorized response