Add JwtTokenStore

This is a simple implementation of TokenStore (which doesn't really store
tokens but knows how to decode enough of them to make DefaultTokenServices
useful). I think it might make JwtTokenServices obsolete but I'll leave
both in for now (and remove one before the next release probably).

See gh-176