 // if there were no expected audiences configured then just
      // consider any audience acceptable
 // if there were no expected audiences configured then just
      // consider any audience acceptable | JWTRedirectAuthenticationHandler.java