What are the key components and mechanisms used to verify the validity of an access token in an authentication and authorization system, and how do these components interact to ensure secure access to protected resources?