bearer token to validate claims
Success
validated username (email)
validated user guid
validated user identification
optional: validated institution identification
optional: validated lesson identification