Returning ClaimsPrincipal from the IJwtSecurityTokenHandler, and using it in the transformer (type-safe)