Add option for alternate property to attach decoded token to on req

Allow the user to change the `req.user` property to be anything else on `req`.
Based on the approach taken by [Passport](https://github.com/jaredhanson/passport).