Now /auth/verify properly states that no token is given
Make /auth/verify dump JWT token
Enforce token when needed
Improve tests and check HTTP status
Minor refactor
Remove unused ref