cf-jwt-simple clone but with claims