1. TokenValidationParameters copy constructor and tests
2. use named parameters to keep 'notBefore' and 'expires' straight.
3. Add method to TokenValidationParameters to Create ClaimsIdentity.
4. adjusted name 'notbefore' to 'notBefore'