Access Token TTL and Revocation

[BarryCarlyon]

You can verify a token (and the scopes it has) by calling the root end point of /kraken/