JWT authentication bypass via kid header path traversal 1 JWT authentication bypass via kid header path traversal 08/12/2024