2.1.0

• Check if the Authorization header prefix fits the expected value, don't try to decode wrong data. (#43, #53)
• Ensure user provided allowed algorithms list overwrites default value instead of merging (#52)