JWT Tokens Explained: Structure, Security, and Common Mistakes