better processing for signed request objects
added transient passthroughs to JOSE algorithms for client
throw appropriate errors from request factory
call encode() instead of new() on Base64URL utility
removed NYI tags from request object algorithm fields
added basic support for encrypted request objects, addresses #475
re-decrypt request object at userinfo endpoint (this shouldn't need to happen)