Validating JWT tokens for non-OAuth mechanisms - Kinde