correct JWT date comparison (?)