send jsonwebtoken back to client on successful login