Allow passing JOSE headers to sign function

I needed to add to the header to use OpenID Connect.