Switch from oauth2 to jwt