Relax content type check applied to the credential response

[babisRoutis]

Currently, library expect that the credential response is being returned with content type:

• "application/json" : In case response is not encrypted, and/or
• "application/jwt": In case of an encrypted response.

Perhaps the first check is too restrictive as it doesn't allow parameters like the encoding to be accepted.