Fix default error code
Formatting
Correctly pass app secret to jwt middleware
Fix findAll
Add JSON pointer based access control