tweak and re-org test cases
have a log entry when JWS signature cannot be verified
ID-206 store jti in verificationToken and attributeBundleToken