adding the 'exp' to validate the expiration date of the JWS