Better test coverage for JWS/EAlgorithmEmbed, JWEEncryptionMethodEmbed
added support for unsigned ID tokens in client, use client configuration to turn this on, closes #633
added unsigned ID token support to server
added "none" to discovery endpoint
changed user button on top bar to drop down, tweaked login page, closes #635
changed all templates to print escaped characters
added escaping to JSP display
further escaping on approval page

closes #634
makes the grant types checker softer, closes #640
key service can now deal with missing 'kid' fields in JWKs

closes #639
reformat / reorder
added configurable support for different token presentation methods in user info fetcher, closes #632
added json member type checking for json utils, won't die if a string is found where an array was expected

closes #637
made login button green
added better hooks for local CSS overrides