Add Verify()/Decrypt() method to JWS/JWE

Partial work for #2, does not yet expose header values.