JSON WEB Tokens: Tips for secure implementation