Currently, there are a few things missing from the tokens that prevents one from actually using the demo: 1. No `sub` claim. 2. No `kid` claim. Without this, the SciTokens client library rejects the token itself. 3. No `jti`. Should be there for good form.