v2.8.0

• added provider clockTolerance option
• fixed clients with jwks_uri failing to be fetched blocking the initialize call
• fixed successful client keystore refresh after failed verification to pass
• bumped node-jose dependency