Replace Session Auth with JWT Auth Strategy

[benrbryant]

Description

We are changing our authentication strategy from session cookies to JSON web tokens to pivot to a friendlier strategy for cross-domain support. Replace the PassportJS session artifacts with PassportJS JWT artifacts.

Technical Details

For storing refresh tokens, utilize the existing refreshtokens collection.

Use the passport-jwt npm package to implement a JWT authentication strategy. See passport-jwt for more details.

Acceptance Criteria

• passport-jwt is used as the JWT auth strategy
• jwt are created and returned after login
• refresh tokens are saved to the refreshtokens collection