Incorrect HTTP Status Code for Expired JWT

[jbcam]

Hello,
I wanted to report this issue regarding expired JWT handling. Currently, the API returns a 422 Unprocessable Entity status code when a JWT is expired.
However, based on HTTP status code standards, returning a 401 Unauthorized status code in this scenario would be more appropriate.

Thanks for your help on that!

[rhanka]

@cristianpb initially we put 422 to make the diff btw jwt and no jwt, but 401 still seems to be the right standard - we should migrate to 401