Ensure SSO works with JWT tokens

See gh-6