removed iss from preVerifyToken JWT