added token based auth with jwt and passport