GitLab

the jwt token is commonly passed by the navigator with a XSRF-TOKEN, so we
allow to grab it from there.

fixes redirect issue; adds token query param; adds sign with secret key

Fix issues with audience validation

Add a basic JSONWebToken Authenticator Implementation