http://www.kitploit.com/2020/04/rs256-2-hs256-jwt-attack-to-change.html