so the flow would be like client -> request JWT auth token from my backend server -> server returns valid one time use token -> client uses that with new Vapi(JWT TOKEN)