looks like get_jwt_token is not used, just use is_admin