JWT tokens with regular webapp aplication