JWT token required / not being passed