roadrecon gather: Add sanity-check for token resource

[rgmz]

Description

I foolishly created a token for graph.microsoft.com instead of graph.windows.net. Running roadrecon gather yielded a large number of 401 errors without an obvious cause:

Error 401 for URL https://graph.windows.net/<id>/applications?api-version=1.61-internal&$select=keyCredentials,objectId

Further debugging showed the error as Authentication_MissingOrMalformed, which was confusing because the requests contained an auth token.

{"odata.error":{"code":"Authentication_MissingOrMalformed","codeForMetrics":"Authentication_MissingOrMalformed","message":{"lang":"en","value":"Access Token missing or malformed."}}}

It took me longer than I'd like to admit to realize my mistake.

Proposed Solution

I have a could ideas to avoid wasting time and sending extraneous requests with an 'invalid' token:

1. Add a sanity check in run that the token is for graph.windows.net
2. Update dump_object (or somewhere more appropriate) to treat 401 as a fatal error and cease enumeration.