https://levelup.gitconnected.com/understanding-web-authentication-session-based-authentication-vs-json-web-tokens-jwts-11871084f3ec
