adding a '/login/' endpoint to generate a JWT auth token