adding JWT and OAuth server for authentication