Phantom tokens: JWTs and sessions combined
zoriya.dev