Update jsonwebtoken to the latest major version

[anandrajana]

Please upgrade to latest jsonwebtoken version 9.0.2

[valenadels]

+1 to this. There is a CVE reported to jws used by jsonwebtoken < 9.0.2

[rocketteering]

In-general, it looks like this package is dead, but you can fix the dependency issue by forcing it to higher version like this. (package.json).

And, since this package appears to be dead, refactor into something else later.

"overrides": {
    "express-jwt": {
      "jsonwebtoken": "9.0.3"
    }
  }