JWT token structure and security best practices – Complete Analysis