fix: JWT algorithm pinning, timing-safe comparisons, timestamp valida…

fix: JWT algorithm pinning, timing-safe comparisons, timestamp valida… #27