Prototyping a jws jwt auth filter