Automatic population of JWT's 'iss' claim value

[dcamper]

Currently, the value that is stuffed into the JWT's iss claim is set through a configuration file.

That method needs to remain in place to cover edge cases, but if the configuration file does not contain that setting (or the setting resolves to an empty string) then the code should automatically determine the value of the iss claim from the incoming request's information.