Add optionalToken parameter to middleware

[magnusburton]

Description

I thought about adding a parameter to allow for tokens to be read, while still allowing tokens to be retired, expired, invalid, or non existent without anything being thrown. If a valid token can be decoded, it'll be returned. The PR does not break anything as it's false by default, so existing implementations will still work.

References

I figured I'd do this due to my own personal need, as well as a couple of discussions within this repository, #194

Testing

I've not yet got around to add tests. If someone would like to contribute with some, please do!

• This change adds test coverage for new/changed/fixed functionality

Checklist

• I have added documentation for new/changed functionality in this PR or in auth0.com/docs
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used, if not the default branch