JWT Decoder

Decode JWT header / payload and check expiry (no signature verification)