Use identity_uri instead of auth fragments

auth_token middleware now accepts a standard URL string as the parameter
identity_uri instead of specifying protocol etc individually. Change the
services over to use this.

This could probably have been done in one review but it was too hard to chase down errors, so splitting it per service.