update validation key from uaa
Add tests for & refactor token signature checking code