Kotlin : Unsafe JWT-token verification