implemented token authentication using JWT and passport