The output of Server::verifyToken is now a hash.