Add shared secret config to enable a trusted client to wrap the JWT auth token

[danmactough]

By allowing a trusted client to use a shared secret to wrap the jwt token, the backend can ensure that the user is using the trusted client.