Implement JWT

I see down there that you expect header to have "alg" attribute in it? I think there can be two ways, either you validate that here, or (which I think is generally better) is to wrap the token packet into your own custom data structures (case classes) and leave only the user-provided parts to be `JsObject`