https://celery94.github.io/posts/difference-between-session-cookies-and-tokens/