New comment by pwinnski in "Why You Should Not Use JWT"