Function verify 

pub fn verify<'a>(
    key: &SessionKey,
    tokens: &'a TokenSet,
    value: &str,
    now_unix: i64,
) -> Option<(&'a TokenEntry, i64)>

Verify a cookie value against the current tokens. Token names cannot contain . and base64url has no ., so the value splits unambiguously.