removes  requirement from built-in storages

I am not sure we need the client to upload a public key per user (i.e. `subject`)... this is a lot of overhead. 

This PR will break BC for built-in-storages, but it may be worth it in order to make JWTBearer less complicated