Add token invalidation to JWT integration

[jameswburke]

Right now, there's no logic running on every admin page hit that validates the JWT token stored in the user's cookie is valid. We should check/validate this more frequently to ensure auth works as expected.