electronic signatures json web token signature validation token security authorization cryptographic message syntax standards track authentication quality of service metadata