Needs base64url variant which preserves padding '=' chars.

[kjessup]

JWT base64url requires padding '=' chars to be stripped, but some other uses need the '=' to be preserved. An encoding should be added which leaves the = intact, replacing only '+' and '/'.