v3.1.5: inline base64url
* The base64url package has issues with TypeScript and also has an open vulnerability reported on HackerOne (not affected). Most replacement packages are only compatible with Node 4+ so inlining an implementation in order to release with a patch version * Update README (Thanks @MMDF!)