I feel the same, I guess using JWT is the joke here?