Add the option to validate the `iss` and `aud` claims for JWT logins.