tuupola /branca-spec2367Authenticated and encrypted API tokens using modern cryptoxchacha20-poly1305apitoken-authenticationjwt