added jwt token auth