jwt authentication in minimal api