Protecting Against Token Replay Attacks

Implement nonces and jti claims to ensure tokens are used only once.