Journal

JWT vs session authentication