JWT bearer token authentication.