JavaScript : Missing verification step of JWT-token