Verifies a session token and returns its payload when valid + unexpired.
The payload.sig cookie value.
payload.sig
Portal session secret.
Procedure with the payload, or failure when invalid/tampered/expired.
Verifies a session token and returns its payload when valid + unexpired.