Properly validate a token in the /check_token endpoint
(would rather have complete validation in a single class, rather than relying on different component to validate different parts)
https://www.pivotaltracker.com/story/show/79624214
[#79624214]
Merge branch 'feature/openid_token_validation' into develop