[authmagic-timerange-stateless-core] Improper Authentication

I would like to report Improper Authentication in `authmagic-timerange-stateless-core` It allows to forge user's identity.

const checkRefreshToken = (token, refreshToken, key) => {
  try {
    if(jwt.verify(refreshToken, key)) {
      return jwt.decode(token, {complete: true}).signature === jwt.decode(refreshToken).signature;
    }
  } catch(e) {
    return false;
  }

  return false;
};