Changed comparison of expiration time from token introspection to match new seconds-from-epoch format sent by the latest version of the authorization server.
Attempted fix to type mismatch.
Removed unnecessary coercion.
Added logic so that if scopes don't match, a 403 Forbidden status code is returned.
Fixed authorization server response check.