issuing user access token

[ali3bdalla]

issuing user JWT token should be done only for verified users, IAM's responsibility is to generate secure JWT token with their scopes, JWT token should contain userId, company id, username,user email and user permissions