Validate signature before claims
Validate signature before claims

As mentioned in #153 by @koenbollen. The signature of the given JWT
should always be checkedbefore any claim validation takes place.

excpt/ruby-jwt,jwt/ruby-jwt,progrium/ruby-jwt,ab320012/ruby-jwt