Structure of Passport’s auth_token's claims