multiple audiences -- implements #4
throws typed error when token is expired
Merge branch 'typed-errors'