Decode JWT correctly