connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes