OAuth: always use claims

[Riscky]

Currently, we use the token endpoint to fetch user information in the wiki and stickermap.
Instead, we should do it the correct way, and use claims.
Undead Mongoose does that already.
This also means we can remove the information from the token endpoint, and close svsticky/constipated-koala#906