JWT is a scam and your app doesn't need it