add jwt auth.