Core Security Core Impact vs jwt-cracker (2026)