JWT (JSON Web Token) (in)security - research.securitum.com