not comparing decoded body for jwt signing