Change API so verify and decrypt are no longer class methods.

Creating a claims object has been deferred from the initializer.

This makes it easier to back and forth, i.e. sign and verify.