Validates the signatures of UAA tokens

- UAA public key is cached at boot time
- key signatures are checked on each request

[#73645402]