• JWT is a bit of a minefield, not sure I'd recommend using it.