This just parses the token without validation to extract one of the following in order to obtain
the name to be used for the principal:
upn
preferred_username
subject
If there is an exception it sets the name to INVALID_TOKEN_NAME and saves the exception for access
via
getJwtException()