Load JWT path from environment file

[campb303]

Continued from ECN/webqueue2-frontend#187

In order to sync the JWT token path, the API should be modified to accept an override for this path via an environment variable files and/or string.

[campb303]

After reconsideration of risks, I don't think it is necessary to restrict the JWT path. The cookie containing the refresh token is HTTP Only and Secure meaning it is not accessible to the client and only sent over an encrypted connection. Therefore to save some headache we can let the JWT path default to / and be done with this. Will make this change in staging now.