JWT decoder

Decode header and payload. Signature is not verified.