Why don't we use the JWTHandler class in the authentication middleware to decode the received token, so we can also handle exceptions properly?