#95 JWT authentication (no issue of tokens just validation)