Update bzSessionFactory.js

use JWT only