added working (but slightly experimental) security library to tales
- base capability clases
- working json web token (JWT) support (signing but no encryption)