Using JWTs to Authenticate Services Unravels API Gateways