fix jwt generation