add default
fix JWT implementation bugs