pub fn create_jwt(username: &str, secret: &str) -> Result<String, String>
Create a signed JWT for the given username, valid for 24 hours.