create jwt for subhub (firebase) access