ssl_verify=no is ignored on ID Token parsing, maybe elsewhere too
The whole purpose of the `ssl_verify` config setting is really to support internal use cases in which we're running against a non-production server and don't want to jump through the hoops to get `requests` to play nice and support SNI.
I don't think there's much other purpose to it.

However, we fail to use it when making an explicit `requests.get` call in `decode_id_token`.

There may be other locations where we make explicit requests. I'll check for that now, but this is the only one which I know is causing issues.
diff --git a/globus_sdk/auth/token_response.py b/globus_sdk/auth/token_response.py
index 04abee4..296f1f3 100644
--- a/globus_sdk/auth/token_response.py
+++ b/globus_sdk/auth/token_response.py
@@ -116,7 +116,8 @@ class OAuthTokenResponse(GlobusHTTPResponse):
         logger.debug('Fetch JWK Data: Start')
         oidc_conf = auth_client.get('/.well-known/openid-configuration')
         jwks_uri = oidc_conf['jwks_uri']
-        jwk_data = requests.get(jwks_uri).json()
+        # use the auth_client's decision on ssl_verify=yes/no
+        jwk_data = requests.get(jwks_uri, verify=auth_client._verify).json()
         logger.debug('Fetch JWK Data: Complete')
 
         return jwt.decode(
diff --git a/tests/unit/test_token_response.py b/tests/unit/test_token_response.py
index cd0c10f..4ade593 100644
--- a/tests/unit/test_token_response.py
+++ b/tests/unit/test_token_response.py
@@ -55,6 +55,7 @@ class OAuthTokenResponseTests(CapturedIOTestCase):
         # mock AuthClient
         self.ac = mock.Mock()
         self.ac.client_id = get_client_data()["native_app_client1"]["id"]
+        self.ac._verify = True
         self.ac.get = mock.Mock(return_value={
             "jwks_uri":
             u"https://auth.globus.org/jwk.json"})
['tests/unit/test_token_response.py', 'globus_sdk/auth/token_response.py']