on /userinfo request, enforce existence of oauth grant before proceeding with the userinfo requests.
/userinfo
linting + tweaks to example scripts.