Secure JWT Authentication + RBAC Setup