How is angular-jwt decoding my JWT without a secret? How is angular-jwt decoding my JWT without a secret? express express