Jwe auth module must honor trusted-hosts, like all authentication module.

Note: the Authentication::isTrustedPeer() as well as trusted-hosts definition could be moved to something else attached to Global configuration, to make this more consistent, given that there are now several authentication modules.