how to use a REST API with JWT