https://lists.pythonprogramminghelp.com/how-to-without-jwt/