Version 0.2.0

Replaced verifySession and getConfig endpoints with JWT.

• iframed award badge URLs get code
• award badge pages exchange code for web token
• successfully decoding of web token replaces verifySession
• inclusion of badge configuration parameters in token replaces getConfig
• call to awardBadge authorized by token instead of AKA_API_KEY