Fix for OPENAM-3620 - reviewed over IM
The JWT signature verification now uses the private key to regenerate the
HS256 hash.

git-svn-id: https://svn.forgerock.org/openam/trunk/openam@7987 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d