Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language