Also, how's the JWT token is being transferred to the main app? More information on that would be great I think to include in your README.
Would be nice to have an explicit LICENSE file.