adding authentication, express--jwt to protect api and jwt to sign token