Critical signature validation bug fix

Fix a critical bug that prevented the library from throwing the required exception when encountering an invalid token signature. Activated the retry behaviour when retrieving JWKS files (Public Keys) during decoding. If the first attempt returns a Retry flag we will wait 250ms before trying again, then 1 sec, 3 sec, 5sec before giving up and returning failed which results in an exception to the calling system.