In the login auth if the password from the jwt doesn't match the password of the user, don't log them in.