JWT token + Policy

@zaid but i need to create?