Check for http:// in JWT issuer check

If MediaWiki has $wgSecureLogin enabled, and OAuth is using the https
url, MediaWiki returns the canonical http:// url in the issuer value
of the JWT, and the base url won't match.

Allow this exception.

Change-Id: I60af0bc6c72c1346d394fb0565f150284c564638