Added a JWT HTTP module.

Should we do `Assert.False(principal.HasClaim(c => c.Type == ClaimTypes.Role));` here to be more specific that there should be no claim at all? Same for the name claim just above.