Use clients preferred algorithm, if any, to sign
Changed client algorithm check to look for null instead of JWSAlgorithm.NONE, which is a valid value.
Compare client_ids instead of Client objects