refactor from jwt-simple to jsonwebtoken and add 2week expiration

Make the number easy for the reader to verify, 60 * 24 * 14, it's worth the extra flops. All caps with underscores is the general standard for constants, so future coders know not to mutate the value (you could also research if `const` is safe to use yet).