JWT authentication bypass via kid header path traversal 1 JWT authentication bypass via kid header path traversal Dec 8, 2024