update auth name and move jwt validation to auth