Better error reporting

* Throw Exception if JWT format is incorrect
* Throw Exception if unable to decode base64 string