Encodes a session payload into a signed token.
Factors, email, fingerprint, and transport to embed (expiry is added automatically).
Portal session secret.
Lifetime of the token, in milliseconds.
Signed payload.sig token string.
payload.sig
Encodes a session payload into a signed token.