Vulnerability in jsonwebtoken dependency

[2uent1n]

Version 9.0.0 of jsonwebtoken is affected by a high severity vulnerability: CVE-2025-65945

I created this PR to bump the dependency to version 9.0.3.

[shawnnolanjr]

when was the last time this repo was maintained? should we be using something else?