I prefer session-based authentication instead of JWT. Fight me.