/userinfo and /tokeninfo endpoint: closes #45 and closes #49