Configuring authentication of JWTs