added jwtauth auth