Updated the documentation to reflect where the claims are pulled from more precisely: https://github.com/FusionAuth/fusionauth-site/pull/1636

Please do let me know about the escaping of the claim when you get a chance, @nathan .