allow the user to request a jwt token that is valid for one week