Kotlin : Privacy violation in JWT-token