should not enforce an optional field

http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html#typHdrDef

States that the typ of the header parameter is optional..