What are JWT's signed with?

Did you put the extension secret (key) into the dev-rig config?