Release 10.2.0

Changes:

• use claims security
• rename User to UserIdentity
• remove access token from JWT
• use ECC instead of RSA (encrypting/decrypting access token)