Adds docs for token aud. Fixes jitsi/jitsi-meet#1871. Fixes #567.

doc/tokens.md

 The following JWT claims are used in authentication token:
 - 'iss' specifies *application ID* which identifies the client app connecting to the server
 - 'room' contains the name of the room for which the token has been allocated. This is *NOT* full MUC room address. Example assuming that we have full MUC 'conference1@muc.server.net' then 'conference1' should be used here.  Alternately, a '*' may be provided, allowing access to all rooms within the domain.
-- 'exp' token expiration timstamp as defined in the RFC
+- 'exp' token expiration timestamp as defined in the RFC
 - 'sub' contains the name of the domain used when authenticating with this token. By default assuming that we have full MUC 'conference1@muc.server.net' then 'server.net' should be used here.
+- 'aud' application identifier. Star is supported (aud = '*') and can be used as default value.
 
 Secret is used to compute HMAC hash value and verify the token.