Basic JWT token auth
More JWT auth tweaks. Not done.