Handle audience as an array
Handle audience as an array

According to RFC7519, `aud` claim is an array of strings; only in case there's one audience, `aud` can be a string.
See https://tools.ietf.org/html/rfc7519#page-9

This fix allows for audience claim to be both string and array of strings.
simov/grant