added 403 error and jwt auth to sales routes