https://github.com/mikenicholson/passport-jwt#extracting-the-jwt-from-the-request