JWT Decoder

Decode header and payload, and optionally verify HS256 signatures.