add jwt/remove validation