Signature is validated, exp, aud and iis fields are checked. Also add tests using tox and py.test. Proper validation of signature is verified using jwcrypto.
