Added basic JWT auth.
Restrict auth to put.