put JWT package in require-dev