feedback until section 4.1.4 of JWT