JSON Web Tokens are actually great, just not for sessions | Dark Hacker News