jwt version was yanked, update