JSON.parse removed, added private key payload verification, time based attacks prevention