Don't send access token in query parameter when getting userinfo
Don't send access token in query parameter when getting userinfo

Passing access token in means that the access token will be visible in
access logs etc and is a bad idea.

UNINETT/passport-dataporten,UNINETT/passport-dataporten