bring in jwtAuth middleware