WIP: extendable JWTAuthorizationMixin._check_token_data