Issue Description

Does it make sense to upgrade github.com/golang-jwt/jwt to v5? Right now we are using v3.

jwt v5 requires go 1.18 in its go.mod. And their support policy only align with Go release policy, but echo seems to support older Go versions. So I'm asking before sending a PR.

jwt v4 is a non-breaking change and only adds Go module support, instead of incompatiable tag in v3.

Checklist

• Dependencies installed
• No typos
• Searched existing issues and docs

Version/commit

master branch