pac4j Pac4j Jwt Vulnerabilities