Auth0 JWT does not have permissions