properly verify grandpa justifications

[brenzi]

we had issues with the current implementations (#1547) and disabled the panic upon BadJustification (warning only) in #1573.

But we need to re-enable this check for full finality security