refactoring JOSE code, part 1
do the JWKs thing only for RSA signatures
more documentation on JWT routines
refactor JWT handling part 2
jose code formatting
correct typo on signature length check
remove obsolete comments