New post! http://www.cloudidentity.com/blog/2014/03/03/principles-of-token-validation/