JWT Auth ignore is_superuser value if False

[fosterseth]

Fixes scenario where bob is a normal user in gateway, but is superuser in controller.

JWTAuth logic will update the bob user with is_superuser False, which is not what we want.

Instead, ignore is_superuser, unless the value is True

[sonarcloud[bot]]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud