JWT should not be your default for sessions

View original