Not sure if this extends to other error cases, but when a malformed Bearer token is sent to .validate(token, callback), the error object passed to the callback is a string value of Not a valid JWT token
expected behaviour:
- Invalid JWT token values result in an error object with keys
name and message like other error objects