title: jwt token how to ensure the payload is updated when database change
body: <p>I have a question regarding the concept of JWT token type of authentication. 
  So suppose I sign a jwt token after user logged in, the token payload contains the username and userRole. I then return the token to the user and store in user's localStorage.</p>
  
  <p>Now, if i change the userrole in database, i.e. from normalUser to AdminUser, how can I then ensure the payload on user's localStorage also change? </p>
  
  <p>I have an issue when if the user is an admin user, when he signs in, a jwt is stored in his localStorage. Afterwards, I set his role to normal user, he can still access the admin features because his localStorage contains the role of AminUser.</p>
  
  <p>Can someone suggests a correct way to implement authorization so that the token is updated on user end? 
  Thanks.</p>