Access token is a JWE when expecting a JWT

It was of good help. thanx @vlad.murarasu