handle invalid jwt signature verification errors

[camallen]

sometimes folks try and use a staging JWT token for the production stats service and the signing keys don't match - handle this gracefully instead of raising