fix(auth_strategy): gracefully log invalid jwt token and return null users instead of an internal server error#32