Protect your API with a full-authentication process based on JWT