anchor.diff:    FCookiePath := AParameters.ByName(JWT_COOKIEPATH_PARAM, AURL.BasePath).AsString;
     FCookieSecure := AParameters.ByName(JWT_COOKIESECURE_PARAM, JWT_COOKIESECURE_PARAM_DEFAULT).AsBoolean;
     Create(GetToken(ARequest), AParameters);
  +end;
  +
  +constructor TMARSToken.Create;
  +begin
  +  inherited Create;
  +  FClaims := TMARSParameters.Create('');
   end;
   
   destructor TMARSToken.Destroy;
  
positive.code:   FIsVerified := False;
    FClaims.Clear;
    UpdateCookie;
  end;
  
  constructor TMARSToken.Create(const ARequest: TWebRequest; const AResponse: TWebResponse;
  
negative.code: 
  constructor TMARSToken.Create(const AToken: string; const AParameters: TMARSParameters);
  begin
    Create(
      AToken
    , AParameters.ByName(JWT_SECRET_PARAM, JWT_SECRET_PARAM_DEFAULT).AsString
    , AParameters.ByName(JWT_ISSUER_PARAM, JWT_ISSUER_PARAM_DEFAULT).AsString
    , AParameters.ByName(JWT_DURATION_PARAM, JWT_DURATION_PARAM_DEFAULT).AsExtended
    );
  end;
  
  function TMARSToken.BuildJWTToken(const ASecret: string;
    const AClaims: TMARSParameters): string;
  begin
    Result := '';
  end;
  
  procedure TMARSToken.Clear;
  