Authentication in Nest.js: JWT Protected APIs and Refresh Token