Merge pull request #340 from artgins/exact-alg-pin-verify jwt: pin the exact algorithm in both verify paths (RFC 8725 3.1)