Authenticating a real-time client with JWT