* Add design doc, revive the domain wide enc token, use jwt from our lib instead of bundy, update docs