Log Message:
(security/R-jose) Updated 1.2.0 to 1.2.1, NEWS not updated, make test passed

1.2
  - jwt_encode_sig() now allows to override the typ field via headers #15
  - jwt_decode functions now check the 'exp' and 'nbf' fields and raise
    and error if token has expired.