Correct decodeToken behavior

[adarshm11]

we don't really need any token functions besides decodeToken to check if

• user is authenticated
• user's authentication level meets the minimum requirement for role-specific functions (e.g. only officers can delete office access cards)

so we can delete all other token functions and absorb them into decodeToken

[weslayer]

adersh

[vietnguyen2358]

LGTM

[thebeninator]

good