Handle missing fields in JWT payload

This ensures that a payload encoded by another client isn't malformed.