steeltoeoss Steeltoe.security.authentication.jwtbearer Vulnerabilities