aux config file, JTI

- can load auxiliary config file which overrides default values (e.g. prod config)
- prevent brute force attack for attribute verification (set jti in verification token and count number of retries per jti)