Token signature verification may use old certificate
Issue #3
new
JWT token signature check requires the authority’s certificate. Currently this loads from a file. It should be downloaded instead.