decode the base64 jwt token