JWT authentication bypass via weak signing key 1 JWT authentication bypass via weak signing key 06/12/2024