Added simple claims processing - now adds req.claims object containing contents of the payload