The structure of a token, once parsed.
The session id embedded in the token (dashed, lower-case). Not a secret and not yet trusted.
The structure of a token, once parsed.