Check if a given bearer token is valid and unexpired.
Note that the bearer token MUST be sent in the JSON body; it CANNOT be sent as an Authorization header.