Private Key JWT Authentication for Single Page Applications