refactored things under a struct, added issuer verification, added optional...

refactored things under a struct, added issuer verification, added optional leeway for clock skew (default: 120 seconds), added optional audience checks, added optional client id check, forcing RS256, reworked test to fake network request.