algorithm_confusion_rs256_to_hs256 1 Lab 07: JWT authentication bypass via algorithm confusion Feb 19, 2026