added jwt authentication