When using the auth0 template - do you have to configure the auth client as RS256 Regular Web Application, or can you still configure it as SPA / HS256?