jwt authorization, expiration, password confirmation, and password length requirement