Add jwt-go
Switch to a self-generated signing key