Bug fixes

Changelog:

• Verify tokens whose issued_at (iat) was up to 10 mins ahead of the current local time. This accounts for the case where the token was issued on server A with localtime ahead of where the token was verified on server B
• Default AWS config

Symmetric encryption

Both parties have IAM access to KMS key