Start of jwt authentication