Accept multiple public keys for JWT signature verification

[sverhoeven]

The bartender web service verifies the signature of a jwt token with a single configured public key. It would be nice if the service could be called by different clients without them sharing the same private key. This can be accomplished by having bartender web service accept multiple public keys.

The server should try to verify signature with each public key until it finds a valid one.