Used JWT to authorize API requests. The API sends back partial data if not logged in, else send full data.