https://griddle-reviews.blogspot.com/2024/04/jwt-how-to-bypass-certain-api-routes.html