All work

Fix Principal typing issue in profile config default implementation

Add CSP protection to views

Add protocol message logging support to the AbstractOIDCMessageEncoder

Fix possible NPE in JWETokenDecrypter when jcaKeyAlg is not supported by the registry

Use security params lookup strategy in base signature security handler

Decouple signature signing logic from SignJWTHandler

Complete decode function of OIDCScopedStringAttributeTranscoder

A128CBC-HS256 Potentially returning the wrong keysize

Exclude jcip-annotations jar from parent POM

Add clockskew to authentication time check

Update Nimbus oauth2-oidc-sdk into 9.5