should be JWT, upper case.
see http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-20#section-5.1