Ignore 'kid' parameter, don't let it stop us verifying the JWT