^4.16.3
This lesson will extract the JWT from the authorisation HTTP header and then decode it with the secret.
It will then check to make sure it contains a specific user role value to determine if a specific route can be called in Express.