how to api with jsonwebtoken