update JWT handling