Helper functions for translating a JWT into a ClaimsIdentity