Minimal JWT implementation
This is a stripped down version of: https://github.com/Keats/jsonwebtoken that only supports HS256