wrapped auth method check, added SECRET_JWT, closes #621