Fix to insure JWT is verified using secret