Added token decoding and signature verification