I have a php backend which takes mobile and password and returns the user info and an JWT access token if the user is valid, I have a React Web App which makes a request to the API, now should I store the JWT and user info in my local storage? and how do I validate that the JWT token stored is valid so that I can protect my private routes