Updated auth to load public key from config file, or from HTTP request to Keycloak