Signature Verification Bypass

jwt-scala is vulnerable to a signature verification bypass. A malicious user can pass a token that declares the cipher type to be NONE or any HS cipher type in the header to the system, passing it off as a correctly signed token.