### Description

Currently, the [`tryAuthenticateToken`](https://github.com/elastic/elasticsearch/blob/55088d154d1764a6d4fa8e9078bde9da1e9ff9a5/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java#L458) method calls `decodeAndValidateToken` which ends up sending two `GetRequest` for the same token ID. First in [`decodeToken`](https://github.com/elastic/elasticsearch/blob/55088d154d1764a6d4fa8e9078bde9da1e9ff9a5/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java#L602) and second in [`checkIfTokenIsValid`](https://github.com/elastic/elasticsearch/blob/55088d154d1764a6d4fa8e9078bde9da1e9ff9a5/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java#L1977). The second call is unnecessary as we already fetched the access token in the first call, it's just simply dropped. We should refactor these two methods to avoid sending second get request just to validate the access token.
x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java
tokensIndex.checkIndexVersionThenExecute(
            ex -> listener.onFailure(traceLog("prepare tokens index [" + tokensIndex.aliasName() + "]", tokenId, ex)),
            () -> executeAsyncWithOrigin(
                client.threadPool().getThreadContext(),
                SECURITY_ORIGIN,
                getRequest,
                ActionListener.<GetResponse>wrap(response -> {
                    if (response.isExists() == false) {
                        
                        
                        logger.trace("The token [{}] probably expired and has already been deleted", tokenId);
                        listener.onResponse(null);
                        return;
                    }
                    Map<String, Object> accessSource = (Map<String, Object>) response.getSource().get("access_token");
                    Map<String, Object> refreshSource = (Map<String, Object>) response.getSource().get("refresh_token");
                    boolean versionGetForRefresh = tokenVersion.onOrAfter(VERSION_GET_TOKEN_DOC_FOR_REFRESH);
                    if (accessSource == null) {
                        onFailure.accept(new IllegalStateException("token document is missing the access_token field"));
                    } else if (accessSource.containsKey("user_token") == false) {
                        onFailure.accept(new IllegalStateException("token document is missing the user_token field"));
                    } else if (versionGetForRefresh && accessSource.containsKey("token") == false) {
                        onFailure.accept(new IllegalStateException("token document is missing the user_token.token field"));
                    } else if (versionGetForRefresh && refreshSource != null && refreshSource.containsKey("token") == false) {
                        onFailure.accept(new IllegalStateException("token document is missing the refresh_token.token field"));
                    } else if (storedAccessToken != null && storedAccessToken.equals(accessSource.get("token")) == false) {
                        logger.error(
                            "The stored access token [{}] for token doc id [{}] could not be verified",
                            storedAccessToken,
                            tokenId