Decode JWT token payload in the browser