JWT Decoder

Decode JWT header and payload, inspect claims and expiry — tokens are never sent anywhere.