Account.statics.decode will crash the app if invalid/malformed token

[maggiben]

unhandled error from calling jwt.decode with invalid/malformed token will crash the app, I sugges you wrap it in a try/catch block:

Account.statics.decode = function(data) {
    'use strict';
    var decoded = null;
    try {
        decoded = jwt.decode(data, tokenSecret);
    }
    catch(error) {
        console.log(error);
        decoded = null;
    }
    return decoded;
};