Implement JWT

maybe trim spaces before checking