auth0 Express Jwt Vulnerabilities