[Security] Properly verify the JWT signature.

[intrigus-lgtm]

The parse method does not verify the signature of a JWT. So it e.g. accepts a token like this: someBase64EncodedHeader.someBase64EncodedClaims. Notice that it accepts a token without a signature. By using the parseClaimsJws method instead, the signature is correctly verified.

[dragonmantank]

Thanks! Website will be updated shortly with this