added api/login method with JWT auth tokens,
added token based authentication middleware