Add Gemfile and lock Active Support to released version.
Scope to correct module.
Update signer API to not use a verify class method.
Avoid code litter in token methods.
Change encryptor API to not use encrypt class method.
Check for the presence of an auth_tag before comparing.
Remove strict encoding test.
Rely on automatically inheriting the secret.
Forgot to require base64.
Document in tests that verify/decrypt returns object responding to payload.
Assert signed/verified tokens have correct format.
Introduce AbstractBase to reduce some duplication.
Parse claims in Tokie and not Signer/Encryptor.
Move blank require to abstract base.
Fix cipher call order dependence.

Key was set before calling encrypt/decrypt which messed up decryption.

Most tests and are now fixed.
Improve readability of checking for untampered data.