Update the jsonwebtoken dependency

This bumps the `jsonwebtoken` package up one major version, these does not seem to be any breaking changes affecting the implementation of it in tachometer.