Check issuer first before running Elixir Authentication

A better solution is to have a JWT authentication filter and have an authentication manager to select which auth provider should authenticate the token.

https://stackoverflow.com/questions/984644/spring-authentication-provider-vs-authentication-processing-filter