Python : Weak JWT signature algorithm