The new version changed `jwt.encode()` to return a str
instead of a bytes. The change preserves compatibility
with both new and older PyJWT

This takes care of two changes:
- The name ExpiredSignature, deprecated in favor of ExpiredSignatureError,
  was dropped
- `jwt.decode(verify=False)` needs to be rephrased as
  `jwt.decode(options={'verify_signature': False})`

Used `algorithm='RS256'` as is done with jwt.encode() but
in decode() it's plural `algorithms` and it sets which algorithms
are valid -- so it needs to be a list and not a string.

... and appears unrelated to the changes at hand