Decodes header and payload client-side. This does not verify the signature, and your token never leaves your browser.
…