decode_without_secret

I've added a separate method, and a new optional parameter to allow the secret not to be used or checked for.

Documentation and a unit test of the new functionality are included.