Implement token introspection endpoint

[aeneasr]

https://tools.ietf.org/html/rfc7662#section-2.1

[aeneasr]

Strict mode basically does the same thing. Unless this is being requested by someone, it's not a must.

[aeneasr]

superseded by #162