Java : Privacy violation in JWT-token