read issuer from delegated support document

The delegated support document tells us about the authority so read
the issuer from there instead of from the Host header.
remove dependency on wai
avert shadowed binding warning
add .travis.yml
bump jose to >= 0.3.38