get sptoken from the jwt