refactor from jwt-simple to jsonwebtoken and add 2week expiration

I honestly feel like 'twoWeeksInMinutes' = 20160 is pretty self explanatory.