adding JWTAuth spec