implement jwt auth & validation and make login screen work

after #3