feature: optional expiration lower bound param; expand JWT auth endpoints

feature: optional expiration lower bound param; expand JWT auth endpoints #76