Use JWT for authentication

To avoid using “username/password” style auth,
authenticate with the JWT instead.