very rough first pass at app-level redirect; using semantically meaningless kid values
updating JWK reference