password validation, password check, and jwt has a timestamp and checks ...

...if the jwt was made in the last 24-hours to grant access to privledged api