I have a project where the web is authenticated with an identity and you want me to use JWT for APIs. What changes should I make to use both at the same time?