Simplified and fixed iat claim creation
Fixed handling of tz-aware datetime obj for expires / notBefore