enhancement(admin): use jwt on the php side as well