modifying jwt token