change auth system, from local to bearer and now we use JWT tokens