You probably need to add a role to the jwt either ...
# javascript
g
You probably need to add a role to the jwt either 'anon' or 'authenticated'