JWT token structure and security best practices – Practical Guide