Can we add a link to the spec here (http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-13#section-4.1.7) for convenience?