ok: signed JWT (231 chars)
ok: decoded round-trip correct
ok: wrong secret rejected
DONE