Update to keep up with spec

claims.aud can now be either an array or single value string