Fix race condition that might result in multiple JWS validator objects

[BobGerman]

In lab E6 there is a race condition in which, if additional HTTP request(s) arrive while the code is awaiting the JWT validator, it will create additional validators. This would not present a security problem but would be inefficient.
Need to cache the promise not the validator object.