trying out jwt tokens