Update just the JWT core package to get the latest Token Factory.

[Duslerke]

What:

• Update the Hackney.Core.JWT package 2 versions up (1.72 -> 1.84 -> 1.87).

Why:

• To get the latest version of the ITokenFactory implementation that adds support for the Cognito token schema.
• The current v1.72 implementation crashes upon encountering Cognito Token due to empty groups key failing to map and leading Token.Groups to getting set as unhandled null.

Notes:

• This is just a preview version update.
• Updating only the JWT core package without the Authorizer as after additional digging through source code I've found that Authorizer core package merely references the JWT core package's ITokenFactory interface definition, and does not do anything more with the package. The way the Google groups authentication setup works is that for any given API, it uses JWT core package to register TokenFactory instance DI, and then that gets used by the Authorizer middleware to populate its Auth filter dependencies. The rest of the JWT usage seems to be limited down to Token class to extract data like email or user name for Activity History purposes.
• The version 1.84 was a fake release, accidentally triggered by some house cleaning done by the cyber team.
• What changes does latest JWT intoduce? See PR: Add cognito authentication flow token schema support. lbh-core#68.

[manimaran-ramalingam]

Approved