Verifying a malformed token causes an exception that can't be handled from client code

[danfloyd111]

Steps to reproduce the issue: try to verify a "bad" token like "foo-bar-baz", it will trigger an "unhandled promise rejection" that can't be captured in client code.

I submitted a PR to fix the issue: #437