Validates a JWT and translates it into a ClaimsIdentity