Verify JWTs provided by the OIDC provider