InvalidAudienceError results in 500 Error Rather than 401/403

[cancan101]

Right now just ExpiredSignature and DecodeError are caught. (See here) but InvalidAudienceError extends InvalidTokenError.

InvalidAudienceError should be caught and then either return None or raise a 401 or 403.

[jpadilla]

@cancan101 decided for now to catch InvalidTokenError and raise AuthenticationFailed.

[jpadilla]

Fixed in v1.5.0