Made token validator more flexible (still a todo for symmetric signing keys)