added secret key
register works, login broken jwt decode