Added a JWT HTTP module.

Good point, ended up checking IsAuthenticated and an empty claim set.