2019-02-28 UTC
# 
fr33domlover looking at it, and you already keep it in your DB, so in practice you don't need to create and sign that JSON document. However you do need to pass *some* token to the issuee, and I *do* want this token signed. At first I didn't think of that, but following your comments, I realized that token can happily be signed or encrypted