GitLab

Handle Google IAP JWT tokens

Fixes error in doc/example

allow other supported algorithms to be used

allow to grab the XSRF-TOKEN from the cookies

not just HS256

the jwt token is commonly passed by the navigator with a XSRF-TOKEN, so we
allow to grab it from there.

Update README to point to installation from PyPi

Use a mixin for LocalAuthenticator variant

c.LocalAuthenticator would also work due to inheritance,
but this is more specific and clearer

This uses the same pattern as in various OAuthenticators,
for example https://github.com/jupyterhub/oauthenticator/blob/master/oauthenticator/github.py#L180

fixes redirect issue; adds token query param; adds sign with secret key

Fix issues with audience validation

Add a basic JSONWebToken Authenticator Implementation