Burp Suite Professional vs jwt-cracker (2026)