Allow noTimestamp option

The JWT spec specifically says that the iat claim is optional. This allows passing `{ noTimestamp: true }` to options to suppress it.