now JWT works 100%
small improvements client-side