(2019)

and the JWT can transport a more encrypted user session as a value

just be intentional