In regards `dgrijalva/jwt-go` CVE-2020-26160

[aldas]

Please see discussion

[andrewpmartinez]

https://github.com/golang-jwt/jwt should be a drop-in replacement with the CVE addressed.

[aldas]

done in #1946