right! you can't just put JWT in there. I saw that and was like...maybe we went too far? hehe