Migrate to Token-Verification endpoint instead of users/me

[jyopp]

https://github.com/appdotnet/api-spec/blob/master/resources/token.md#retrieve-current-token

This looks like a more correct way to verify that the OAuth token is good and find the user it is for.