Python : Unsafe JWT-token verification