expose verify token function

[bamarni]

Service account credentials are not necessary to verify a user token, at the moment they're only used to extract the project id.

It could be useful to expose the verify function directly for people only interested in this functionality, WDYT?