+ imContext.initilise() requires servletContext to locate keystore
+ verbose error messages in JWTVerifier.verifySignature()