moving JWT from external vendor to project