added jwt decoded event to allow additional token validation
cleanup JWTProvider, added and updated tests