added jwt authentication middleware