fixed JWT demo data paths and added postman api tests