ngrok blog: Introducing JWT validation for your API