Store user info in encrypted jwt token

[vityaman]

Now there is only user id is stored, so we get user info from database on each authentication which is bad for performance. Also payload should be encrypted to improve security.