support encrypted JWTs using RSA1_5 and A128CBC-HS256