Stop Using Json Web Tokens. Use Cookies & Server Sessions Instead