Add JWT TokenServices

So far untested, but if oauth2.resource.jwt.keyValue or keyUri are
set it should trigger JWT decoding of tokens on the resource server.

See gh-6