and hasura need a solid secret to activate the jwt auth feature, or give hasura a jws url for auth. what url i could use?