[keycloak-user] Recommended way to identify user from token