included JWT config and vanilla Token Auth