Jwt.sign within rule generates invalid token frequently