Add logging to catch invalid JWTs in the act