fake-jwt-sign payload missing exp code example Example: jwt decode jwt.decode( token, SECRET_KEY, algorithm='HS256' )