https://jwt.is is also fully client-side