Investigate possibility of using a library as JWT implementation

[siepkes]

wrensec-commons Contains it's own JWT implementation (dating back from it's ForgeRock roots). However maintaining a well tested and documented JWT implementation is no small feat. In the future the JWT specification might even be extended forcing us to implement those new pieces.

The idea is that maintaining our own JWT implementation doesn't offer us an advantage over other IAM solutions. Therefor we should investigate if we can replace it with a well documented, maintained and tested JWT library and so off loading the maintenance burden.

Examples of Java JWT libraries are:

• auth0's JWT library (uses BouncyCastle)