php rest api jwt authentication