Stop passing JWTs around as dicts

Every Python codebase I have read that deals with JWTs ends up in the same place. A helper decodes...