add jwt verify back in