Consolidate HTTP error codes in JWT federation filter

In org.apache.knox.gateway.provider.federation.jwt.filter.AbstractJWTFilter.validateToken(...) there are multiple validation takes place and Knox returns 400/BAD_REQUEST in some places where 401/UNAUTHORIZED sould have been used (for instance, when a token is expired).