Throw a better error when no alg in header

This puts a check into `algoFromJWS` to make sure the `header.alg`
property exists before trying to return it. If it does not exist, we
explode early and with a descriptive error instead of exploding on a
`null` later on (damn you, null!)