JWT decoder

Read the header and claims inside a JWT, without sending it anywhere.