Auto Download of Public Key should be optional

[dvinell]

There's an assumption that the issuer URL is actually accessible from the Browser decoding the JWT.
In many cases, this is not a valid assumption, if the issuer is on another internal network.
If this is the case, the call to the /.well-known/openid-configuration can take 15 seconds or longer before it times out.
This appears as a "pause" in the decoding process before the results are displayed.

An improvement would be to make the auto download of the public key to be optional.