Support plaintext JWTs (alg=none) properly