Feature/adding jwt token validation

[eknowlton]

• Added JWT Token Authentication
• JWT Auth disabled by default
• Added Jwt section to config
  • Including JWT Secret for token validation

I at some point put the usage statistics per sub from the JWT token inside redis, with the number of API calls but that didn't seem like the right place. I can push that or do something else if you have a idea of where it would be more useful.

[eknowlton]

I added a singing key validation. Unfortunately I only did HMAC256|384|512 but I noticed the gem ruby-jwt supports more

The JWT spec supports NONE, HMAC, RSASSA, ECDSA and RSASSA-PSS algorithms for cryptographic signing. Currently the jwt gem supports NONE, HMAC, RSASSA and ECDSA

This could be more complicated if you want to add them too. Or remove it all together, or even make signing validation optional.

You're call.