update jwt because 0.1.12 is yanked