Be more elaborate on CBOR/CWT types and definitions

[paulbastian]

This includes standalone seperate references for each of the claims rather then referencing the JWT based definition.