JWT provider/consumer support

We should, next to OAuth, also provide support for doing authentication with JSON Web Tokens in both directions.

https://jwt.io