If I create JWT tokens on my express end, how would I make sure it is bound to a user on graph.cool end?