"invalid credentials" calling userinfo

Figured this one out via DM.

The id token was being inspected rather than the access token.