verify the Authentication Tag in encrypted JWTs