jwt 2 Lab 02: JWT authentication bypass via flawed signature verification Feb 18, 2026 Lab 01: JWT authentication bypass via unverified signature Feb 18, 2026